Overview

overview

10

Static

static

10

736bfc1d66...eb.exe

windows7-x64

10

736bfc1d66...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    736bfc1d6619147f663a900b031ba132b00fdc8b6ca9ea354e438ec3b96131eb

  • Size

    76KB

  • MD5

    7720a1e91c635349e1b141310781f355

  • SHA1

    aa1d432e318499b5e72f9c509d93a5604d938f5a

  • SHA256

    736bfc1d6619147f663a900b031ba132b00fdc8b6ca9ea354e438ec3b96131eb

  • SHA512

    1dc16be19843a8264481568965527ceebf7cee32f1faccaf055aaa9a1b918402db19bbc1d4fa454198e9997d18a3c327d4264a8e17032b84ff91c0e56e4785e7

  • SSDEEP

    768:GQzJwryb2AA162ktIDbb83jCNGsTscvMSfgfAUttdnBIzAd1M6SQZ1IQxepX6p:xzl2AAbqI/kjQVMEgfAUtt7Yu53xl

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://154.12.20.247:8012/JnBc

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 736bfc1d6619147f663a900b031ba132b00fdc8b6ca9ea354e438ec3b96131eb
    .exe windows:4 windows x64 arch:x64

    06ada505c1fe312dc36a404d911311e6


    Headers

    Imports

    Sections