General
- Target 5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
- Size 17KB
- Sample241214-ej316svper
- SHA256 5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132
- MD5 ede69af9ae89011d6118e2f3e1f30219
- SHA1 5e9284c463542ccef1e2083973bfaa7fa207acda
- SHA512 298e124dff6c3cac2532f35ba14995c40c44eba17ea145a724490a77945bbc797a3dd8c369a728a5594c9fd605421bab48dae712d9a5151194e82526044b6cfb
- SSDEEP 192:ADMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH403oRK+BUbOj6kxiY:ADMAoKz6WtKEj7aBDiH32bAY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://118.31.122.36:8079/Y2dn
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)
Targets
-
- Target 5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
- Size 17KB
- SHA256 5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132
- MD5 ede69af9ae89011d6118e2f3e1f30219
- SHA1 5e9284c463542ccef1e2083973bfaa7fa207acda
- SHA512 298e124dff6c3cac2532f35ba14995c40c44eba17ea145a724490a77945bbc797a3dd8c369a728a5594c9fd605421bab48dae712d9a5151194e82526044b6cfb
- SSDEEP 192:ADMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH403oRK+BUbOj6kxiY:ADMAoKz6WtKEj7aBDiH32bAY
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Cobaltstrike family