Overview

overview

10

Static

static

3

0397446de8...c8.exe

windows10-2004-x64

10

0397446de8...c8.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0397446de827fc7c5e161061fafb5e1a72847a9d653a675c7b2ae7b687c620c8.exe
  • Size 7KB
  • Sample260602-14sa3aev7x
  • SHA256 0397446de827fc7c5e161061fafb5e1a72847a9d653a675c7b2ae7b687c620c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

  • cobaltstrike

C2

  • http://47.120.39.182:63306/Gs3p

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)

Targets

    • Target
      0397446de827fc7c5e161061fafb5e1a72847a9d653a675c7b2ae7b687c620c8.exe
    • Size 7KB
    • SHA256 0397446de827fc7c5e161061fafb5e1a72847a9d653a675c7b2ae7b687c620c8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorcobaltstriketrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks