General
- Target LisectAVT_2403002A_65.exe
- Size 971KB
- Sample240725-a48pyaxdnq
- SHA256 57355bd9245f0872359737bf78d81b29c99a3775505adefdbd2edfe8914f691c
- MD5 a2deca9356b2a7865c02891a5b697ec9
- SHA1 a369914ab29a7e20c668ba688119323700e49ee1
- SHA512 498be20aeb59847d365327fc8f9b9f31f7579457afd18e6ad2662d1b16c32a2f7b19ae8fffd96a6927abbf7214e8fc64c056c05d6b77fb8be13fb3d3fed19fad
- SSDEEP 12288:JycEiDYbDka2fyvDKidjWoEEwkdWmzzB5FavJz9tSAhj7r:JdDY3kapoMB6v5fSA17
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LisectAVT_2403002A_65.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
LisectAVT_2403002A_65.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://50.118.225.251:2333/1Omp
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)
Targets
-
- Target LisectAVT_2403002A_65.exe
- Size 971KB
- SHA256 57355bd9245f0872359737bf78d81b29c99a3775505adefdbd2edfe8914f691c
- MD5 a2deca9356b2a7865c02891a5b697ec9
- SHA1 a369914ab29a7e20c668ba688119323700e49ee1
- SHA512 498be20aeb59847d365327fc8f9b9f31f7579457afd18e6ad2662d1b16c32a2f7b19ae8fffd96a6927abbf7214e8fc64c056c05d6b77fb8be13fb3d3fed19fad
- SSDEEP 12288:JycEiDYbDka2fyvDKidjWoEEwkdWmzzB5FavJz9tSAhj7r:JdDY3kapoMB6v5fSA17
- MD5 SHA1 SHA512 SSDEEP
Score10/10