Overview

overview

10

Static

static

3

3a51ae3570...35.exe

windows7-x64

10

3a51ae3570...35.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a51ae3570e2b7158e2cfe4960e3be95b904cf3d89ac575e23b50b81e2dd2d35

  • Size

    19KB

  • Sample

    240626-cf9y7syame

  • MD5

    c80782e917ff08751f3eef72163d0cfe

  • SHA1

    2bd56e8b35d1ddfee5d68fecfeb1d370d64dabbe

  • SHA256

    3a51ae3570e2b7158e2cfe4960e3be95b904cf3d89ac575e23b50b81e2dd2d35

  • SHA512

    3715a580a88a2bea56244dbe8dd464a52654386eb23ac8121b49d77f4b75ab25aa3fa64efdc11eaf0a7b38416bd5309032026dff487e21da3b7a5dad200efd9f

  • SSDEEP

    192:NV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/22rvYqWF8qa1Dojjgi:/qaCF31cix+Dc4zjXreFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.200.130:443/QpUG

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

Targets

    • Target

      3a51ae3570e2b7158e2cfe4960e3be95b904cf3d89ac575e23b50b81e2dd2d35

    • Size

      19KB

    • MD5

      c80782e917ff08751f3eef72163d0cfe

    • SHA1

      2bd56e8b35d1ddfee5d68fecfeb1d370d64dabbe

    • SHA256

      3a51ae3570e2b7158e2cfe4960e3be95b904cf3d89ac575e23b50b81e2dd2d35

    • SHA512

      3715a580a88a2bea56244dbe8dd464a52654386eb23ac8121b49d77f4b75ab25aa3fa64efdc11eaf0a7b38416bd5309032026dff487e21da3b7a5dad200efd9f

    • SSDEEP

      192:NV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/22rvYqWF8qa1Dojjgi:/qaCF31cix+Dc4zjXreFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks