Overview

overview

10

Static

static

10

aff7c4268a...fe.exe

windows7-x64

1

aff7c4268a...fe.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aff7c4268ab620bf7615f98dff2ae19f3c49592834b9c776352a0e70fc951afe

  • Size

    121KB

  • MD5

    251d7b357282bdb16c9b800178a13b48

  • SHA1

    45376dfca113accb194e17dec2b4cca65bd1c833

  • SHA256

    aff7c4268ab620bf7615f98dff2ae19f3c49592834b9c776352a0e70fc951afe

  • SHA512

    a707bf5248b355f568877f76622ea645d69677489418df2b4dffff3b7ff0810e75015efece49d017555479b82ded59030533b4a79cc2d3499d6679da96737c90

  • SSDEEP

    1536:e/OrWk65WlgB7VIxYJhb2pcMApHqJjTppqFGpEL02KNtB0TY2dHISn:1rX6EY78/pCvck3n

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.163:443/jLVQ

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aff7c4268ab620bf7615f98dff2ae19f3c49592834b9c776352a0e70fc951afe
    .exe windows:4 windows x64 arch:x64

    2e8c5c672c943518bda68611ed2262d8


    Headers

    Imports

    Sections