Overview

overview

10

Static

static

3

cecbca3202...9d.exe

windows7-x64

7

cecbca3202...9d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cecbca32026b386332785966195ed06063e524b30a258079232da1bbf7b31b9d

  • Size

    12.0MB

  • Sample

    241120-qngvaaxmfz

  • MD5

    1f8357159d41d76a88aab38e8ceb64c0

  • SHA1

    2f6cff1f4f825de4ab77a6d9790f34dede374eb9

  • SHA256

    cecbca32026b386332785966195ed06063e524b30a258079232da1bbf7b31b9d

  • SHA512

    1ead59ebc2585e85255b3f53a456b921905f573dab6b2f847218a4dec1c235bba8aab58f44b3ae879f6e88e6ec3d1909280cb6f8ffc15973154dc18528ba54ae

  • SSDEEP

    196608:snkw9Yi0RV1Z2azjvj8p5drY+YLPrCsXDjDyf6L2WliXYrHW1VCKI2tkLjsTYEHu:lw9Yi2Vlj87dyPrCEDVL2ciIrHWHC32e

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://23.94.214.172:6666/1taW

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MDDRJS)

Targets

    • Target

      cecbca32026b386332785966195ed06063e524b30a258079232da1bbf7b31b9d

    • Size

      12.0MB

    • MD5

      1f8357159d41d76a88aab38e8ceb64c0

    • SHA1

      2f6cff1f4f825de4ab77a6d9790f34dede374eb9

    • SHA256

      cecbca32026b386332785966195ed06063e524b30a258079232da1bbf7b31b9d

    • SHA512

      1ead59ebc2585e85255b3f53a456b921905f573dab6b2f847218a4dec1c235bba8aab58f44b3ae879f6e88e6ec3d1909280cb6f8ffc15973154dc18528ba54ae

    • SSDEEP

      196608:snkw9Yi0RV1Z2azjvj8p5drY+YLPrCsXDjDyf6L2WliXYrHW1VCKI2tkLjsTYEHu:lw9Yi2Vlj87dyPrCEDVL2ciIrHWHC32e

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks