Overview

overview

10

Static

static

3

06a509393d...4f.exe

windows7-x64

10

06a509393d...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06a509393d4894aec321afd3f94eaee632726d4c3c45623c6d68be63f012fe4f

  • Size

    19KB

  • Sample

    240702-nm862azfpe

  • MD5

    d826b368edd5f12f1d198cf29f9367c5

  • SHA1

    0329aafe73ea4e436616a7c451e3c73086916a49

  • SHA256

    06a509393d4894aec321afd3f94eaee632726d4c3c45623c6d68be63f012fe4f

  • SHA512

    c7067ff8d3f4a816266f2e9d474638baf55d8b6e5dd49962ba61b1ac97d423e3c58c4d63fa74dcb598536f58c0c3454cc46ade0b14da9a35264a15550077f073

  • SSDEEP

    192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZqEmmZWF8qa1Dojjgi:jqaCF31cix+Dc4zjRE7EFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.177.132:80/5lHt

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Targets

    • Target

      06a509393d4894aec321afd3f94eaee632726d4c3c45623c6d68be63f012fe4f

    • Size

      19KB

    • MD5

      d826b368edd5f12f1d198cf29f9367c5

    • SHA1

      0329aafe73ea4e436616a7c451e3c73086916a49

    • SHA256

      06a509393d4894aec321afd3f94eaee632726d4c3c45623c6d68be63f012fe4f

    • SHA512

      c7067ff8d3f4a816266f2e9d474638baf55d8b6e5dd49962ba61b1ac97d423e3c58c4d63fa74dcb598536f58c0c3454cc46ade0b14da9a35264a15550077f073

    • SSDEEP

      192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZqEmmZWF8qa1Dojjgi:jqaCF31cix+Dc4zjRE7EFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks