General
- Target 816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8
- Size 2.5MB
- Sample240825-hvpjpsshkq
- SHA256 816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8
- MD5 3ed326e4d1415ca66806b43e0dd710f3
- SHA1 62af7c29a280be9e14b23a416d7f2a16499cf19b
- SHA512 883149403b7f909bc7883992c29cd48cd44f171ab25b5d9385ba21d9c25450eaba4f5b8dac2b3a303c0bcb607d4ef9188105c045b4ba514cd2140cab1a58318b
- SSDEEP 49152:EcRD0LfcT8yjOORCJuy+T/pq281dkbR0NjO03/suBcNMc71:Ev+Ls28Tk0E0NBbc7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.190.138:80/OzPD
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
Targets
-
- Target 816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8
- Size 2.5MB
- SHA256 816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8
- MD5 3ed326e4d1415ca66806b43e0dd710f3
- SHA1 62af7c29a280be9e14b23a416d7f2a16499cf19b
- SHA512 883149403b7f909bc7883992c29cd48cd44f171ab25b5d9385ba21d9c25450eaba4f5b8dac2b3a303c0bcb607d4ef9188105c045b4ba514cd2140cab1a58318b
- SSDEEP 49152:EcRD0LfcT8yjOORCJuy+T/pq281dkbR0NjO03/suBcNMc71:Ev+Ls28Tk0E0NBbc7
- MD5 SHA1 SHA512 SSDEEP
Score10/10