Overview

overview

10

Static

static

10

18c8f1d473...58.exe

windows7-x64

10

18c8f1d473...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18c8f1d47344c31ac41e950f5155c31f05d402339670ca47ef92de09c9b31d58.exe

  • Size

    202KB

  • MD5

    2d8de677fc6d32b44a466150a87e4df5

  • SHA1

    aa3ec5055c9649a56dfa8c7c1829b867f474ed3d

  • SHA256

    18c8f1d47344c31ac41e950f5155c31f05d402339670ca47ef92de09c9b31d58

  • SHA512

    23adb266ced46a12a45889385765df3de74ef043149ff894edf177423498a49cd11726704b341bd15b1682678f7d83745787c31b6ffa98613d3c37bab53755bd

  • SSDEEP

    3072:kZAbqnjcuA8xMm23uFJxvKKhYVy/qZomiwjKQw270q4t4uFbDh/:eYwjpzrvJbSZ4hq4t40/

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://154.12.20.247:8012/JnBc

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18c8f1d47344c31ac41e950f5155c31f05d402339670ca47ef92de09c9b31d58.exe
    .exe windows:4 windows x64 arch:x64

    06ada505c1fe312dc36a404d911311e6


    Headers

    Imports

    Sections