Overview

overview

10

Static

static

3

a13a268bf4...96.exe

windows7-x64

10

a13a268bf4...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a13a268bf45c8fa27c892fa94059366244be09d09c30b7382e7c7fd4f2a3c996

  • Size

    19KB

  • Sample

    240627-rvqw7svgrb

  • MD5

    e7c9c8ecc4897318cd12ee592948788c

  • SHA1

    09ccb8b4306876f609ef03ab1a4ba866f750696b

  • SHA256

    a13a268bf45c8fa27c892fa94059366244be09d09c30b7382e7c7fd4f2a3c996

  • SHA512

    c5fbf2689db5c493a5e9ae99a25a6052e7db30a9edcda3c24bbc38967ef464cff9103aecf2ad480a9d93a51194dc2fc71c54a19545ab1714e2077c2acbb38a3d

  • SSDEEP

    192:7V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/29+Wvczs4WF8qa1Dojjgi:VqaCF31cix+Dc4zjxzsNFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.1.67:8080/pLj7

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

Targets

    • Target

      a13a268bf45c8fa27c892fa94059366244be09d09c30b7382e7c7fd4f2a3c996

    • Size

      19KB

    • MD5

      e7c9c8ecc4897318cd12ee592948788c

    • SHA1

      09ccb8b4306876f609ef03ab1a4ba866f750696b

    • SHA256

      a13a268bf45c8fa27c892fa94059366244be09d09c30b7382e7c7fd4f2a3c996

    • SHA512

      c5fbf2689db5c493a5e9ae99a25a6052e7db30a9edcda3c24bbc38967ef464cff9103aecf2ad480a9d93a51194dc2fc71c54a19545ab1714e2077c2acbb38a3d

    • SSDEEP

      192:7V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/29+Wvczs4WF8qa1Dojjgi:VqaCF31cix+Dc4zjxzsNFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks