Overview

overview

10

Static

static

10

fe14779dc9...c2.exe

windows7-x64

10

fe14779dc9...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

  • Size

    108KB

  • MD5

    9f3ed9525df8efdcb81f5c89bcc753b1

  • SHA1

    b3604e26e00fe072b44ad66baff36eb1c5d2bdcb

  • SHA256

    fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

  • SHA512

    4a71965648708642afdc0dc8f8e66e3b5bd4bea9b5c862e7206e34bdccde4d2761e069ac22f6846f60d97e23e4839c9ecafc0255b356814072ad42dfff40ebb9

  • SSDEEP

    1536:+8BuezwI3vEyKs6vb+clSzkv0kWqZZrqDxcK8sWwd49dlCp2+h0:PB/c3b+CKkv0pqZZrAx7boYp2+h0

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.0.1.4:8090/UQvA

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2
    .exe windows:6 windows x64 arch:x64

    34f338b13147b7322a013634e4b210a4


    Headers

    Imports

    Sections