Overview

overview

10

Static

static

3

e2201b45db...c0.exe

windows7-x64

7

e2201b45db...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2201b45db5c401eb4305b5083ad45fdc6f8eef6f90a5075003e2434c54f8bc0

  • Size

    6.7MB

  • Sample

    241124-fs92hsvrdy

  • MD5

    1f971ce59f0f3028434e1220e1f1cc1d

  • SHA1

    f9083bb3e378f2d0b951d8fd90706ab948207b23

  • SHA256

    e2201b45db5c401eb4305b5083ad45fdc6f8eef6f90a5075003e2434c54f8bc0

  • SHA512

    3feae0bf55b476fda9688c725900299fc45d329e31f6a9ba2323c1ed8e9d39a628e5c222472ee08dec46f8a07d97dd1b615d9d0bc92d836cb20fb3e172d0b09f

  • SSDEEP

    196608:VLdzUjpRwcL2Vmd6+DClOToPVIn+LH/+z3+0XD6AGho:/oVRTL2Vmd6mZTodIn+LH/+zv6A

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.128.47.217:447/rN1l

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Targets

    • Target

      e2201b45db5c401eb4305b5083ad45fdc6f8eef6f90a5075003e2434c54f8bc0

    • Size

      6.7MB

    • MD5

      1f971ce59f0f3028434e1220e1f1cc1d

    • SHA1

      f9083bb3e378f2d0b951d8fd90706ab948207b23

    • SHA256

      e2201b45db5c401eb4305b5083ad45fdc6f8eef6f90a5075003e2434c54f8bc0

    • SHA512

      3feae0bf55b476fda9688c725900299fc45d329e31f6a9ba2323c1ed8e9d39a628e5c222472ee08dec46f8a07d97dd1b615d9d0bc92d836cb20fb3e172d0b09f

    • SSDEEP

      196608:VLdzUjpRwcL2Vmd6+DClOToPVIn+LH/+z3+0XD6AGho:/oVRTL2Vmd6mZTodIn+LH/+zv6A

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks