General
- Target 2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike
- Size 4.3MB
- Sample260131-e7gsvahv5d
- SHA256 ec89ee06be23502099170957ded0f6e6706b8bccd83e37a83a02521e65d9d52f
- MD5 d3930b65f6bf355294322aec6b939046
- SHA1 1d2a565008a18fae4b259847f924fcf2a176713d
- SHA512 bd03f77c9032680ab6bd0e988efff88295b671fa7ffb402a14b4108e9ba9cf290329043429a338281ec49bd514577b68a1088ac1843db38bdb5534537198d051
- SSDEEP 49152:jqcYa3OVcSadm4vqFv069Mg8RVWt2KCSXjhy4NK1/IG:2a3L7SMDZgclz
- TLSH T1532639D3B89519A1C67FF2F49CA163523231786903313BD71B98696708EABC827BF714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
2
C2
-
http://138.226.237.76
Attributes
-
url_path
/7a4258876d1d42c1.php
rc4.plain
rc4.plain
Targets
-
- Target 2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike
- Size 4.3MB
- SHA256 ec89ee06be23502099170957ded0f6e6706b8bccd83e37a83a02521e65d9d52f
- MD5 d3930b65f6bf355294322aec6b939046
- SHA1 1d2a565008a18fae4b259847f924fcf2a176713d
- SHA512 bd03f77c9032680ab6bd0e988efff88295b671fa7ffb402a14b4108e9ba9cf290329043429a338281ec49bd514577b68a1088ac1843db38bdb5534537198d051
- SSDEEP 49152:jqcYa3OVcSadm4vqFv069Mg8RVWt2KCSXjhy4NK1/IG:2a3L7SMDZgclz
- TLSH T1532639D3B89519A1C67FF2F49CA163523231786903313BD71B98696708EABC827BF714
- MD5 SHA1 SHA512 SSDEEP TLSH
Stealc family