Overview

overview

10

Static

static

10

2024-11-27...id.exe

windows7-x64

2024-11-27...id.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-27_a9d0c744ed4bf8e4c010dcdea180c574_cobalt-strike_icedid

  • Size

    4.8MB

  • MD5

    a9d0c744ed4bf8e4c010dcdea180c574

  • SHA1

    8a8f0f8a91af82040b099ccb473282ce848aa9d9

  • SHA256

    9790bbe91a0f52bcccbf8c8070c6e2c8f771b16814d54887f3fb7c67c44a11c5

  • SHA512

    8ad350d3000f6a6a7f94c24e7631bca29de46c30f5704fa9bf22e56f348329a4f85c22e2528cec0e3f22c435c568b20bbb891b6a6f6c7f6badb7c1c0742ef9c1

  • SSDEEP

    98304:1DGNSuNY3icztjLO5UE2Ymg77UQ1mfa/ewsf:NGNO3icztfO5UEIg7oQcfa/ewsf

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

47.236.122.191:7900

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-27_a9d0c744ed4bf8e4c010dcdea180c574_cobalt-strike_icedid
    .exe windows:6 windows x86 arch:x86

    5f9dc9a8e05da850629092e4e2c5d8cf


    Headers

    Imports

    Sections