General

  • Target

    ee309b97bf6f1d0d061885c53c577e9349093a0489f31d3b1919aacfd30452ed

  • Size

    344KB

  • MD5

    92b3ed4c57b6d202f5fe0fcc7dc98fda

  • SHA1

    fb3b42440c4263ac120af7ef593787de4573b598

  • SHA256

    ee309b97bf6f1d0d061885c53c577e9349093a0489f31d3b1919aacfd30452ed

  • SHA512

    81cd9faff4c4990539a75dc429bd5b985bf72950bc3a6e50651f073b8f328bc195b84c71b566411ad6f6d1a1b87cf78c4d05c420ec4ec9a1f4adfa3c551f96d9

  • SSDEEP

    6144:5/4iH4D21+ETbu60MQaHsX6v9ALzCGKiHgupQnU:5gu4TETbu60M/u6v9ALGTwRpB

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.201.128:4444/ukL1

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee309b97bf6f1d0d061885c53c577e9349093a0489f31d3b1919aacfd30452ed
    .exe windows:6 windows x64 arch:x64

    33d28447b03bb4521a15a3065f8716ea


    Headers

    Imports

    Sections