Overview

overview

10

Static

static

3

aa3863c517...24.exe

windows7-x64

7

aa3863c517...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa3863c51757c1bbad6a267bb066b131917cd455f33f52219cdc1155a72e1c24

  • Size

    6.5MB

  • Sample

    241122-fw4nxa1lan

  • MD5

    df4b967cbd70cf971f039923c3fe3ad1

  • SHA1

    af4814d149fe8c2ee0ebfcbba8ccd7d9d2b82ef6

  • SHA256

    aa3863c51757c1bbad6a267bb066b131917cd455f33f52219cdc1155a72e1c24

  • SHA512

    b8fd7137a11b5ff703b3faa8614468bca996a15f3796977d93117e1651d60265ed435d2b2af97a1f80bd4d015b1d3fd80767da58463a0a716d0228145256a25f

  • SSDEEP

    196608:6/aFUmvdsCncW4njQthsiHzPSEM7kAOZJJb4h:vFvaCncbnKhsxL7Md

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.126.233:80/X5Wy

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Targets

    • Target

      aa3863c51757c1bbad6a267bb066b131917cd455f33f52219cdc1155a72e1c24

    • Size

      6.5MB

    • MD5

      df4b967cbd70cf971f039923c3fe3ad1

    • SHA1

      af4814d149fe8c2ee0ebfcbba8ccd7d9d2b82ef6

    • SHA256

      aa3863c51757c1bbad6a267bb066b131917cd455f33f52219cdc1155a72e1c24

    • SHA512

      b8fd7137a11b5ff703b3faa8614468bca996a15f3796977d93117e1651d60265ed435d2b2af97a1f80bd4d015b1d3fd80767da58463a0a716d0228145256a25f

    • SSDEEP

      196608:6/aFUmvdsCncW4njQthsiHzPSEM7kAOZJJb4h:vFvaCncbnKhsxL7Md

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks