Overview

overview

10

Static

static

3

e688fc9bbc...b3.exe

windows7-x64

10

e688fc9bbc...b3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e688fc9bbce654f3adb8e4b3252973b3f51b14745ef00f320afa23363480e1b3

  • Size

    1.5MB

  • Sample

    240627-x5hapsyemq

  • MD5

    e83f5476d322fa075f07bf241fcdb73e

  • SHA1

    f4eba14856c789dc3acaef789e5ae770b46d212d

  • SHA256

    e688fc9bbce654f3adb8e4b3252973b3f51b14745ef00f320afa23363480e1b3

  • SHA512

    5ea19c86ca0ee486b8de70a04ebef047092dc7daa9260a076daff9beae755d290c154e9efe0e6c72393047d3b9e97cfdfac7c5a5a5a86d23fe3702b04ef92fd8

  • SSDEEP

    24576:lXBxza3I3/G/8dICflkiCgiCE9eYUOD1Js:1BxzaY368mC9ygiCuCOD1

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.243.102.76:11451/sNHT

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Targets

    • Target

      e688fc9bbce654f3adb8e4b3252973b3f51b14745ef00f320afa23363480e1b3

    • Size

      1.5MB

    • MD5

      e83f5476d322fa075f07bf241fcdb73e

    • SHA1

      f4eba14856c789dc3acaef789e5ae770b46d212d

    • SHA256

      e688fc9bbce654f3adb8e4b3252973b3f51b14745ef00f320afa23363480e1b3

    • SHA512

      5ea19c86ca0ee486b8de70a04ebef047092dc7daa9260a076daff9beae755d290c154e9efe0e6c72393047d3b9e97cfdfac7c5a5a5a86d23fe3702b04ef92fd8

    • SSDEEP

      24576:lXBxza3I3/G/8dICflkiCgiCE9eYUOD1Js:1BxzaY368mC9ygiCuCOD1

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks