Overview

overview

10

Static

static

3

2026-01-31...ke.exe

windows10-2004-x64

10

2026-01-31...ke.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike
  • Size 4.3MB
  • Sample260131-e7gsvahv5d
  • SHA256 ec89ee06be23502099170957ded0f6e6706b8bccd83e37a83a02521e65d9d52f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned binary was signed by an untrusted entity.

File Explorer

  • 2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike
    .exe 4.3MB

2026-01-31_d3930b65f6bf355294322aec6b939046_cobalt-strike

  • IMPHASH 4035d2883e01d64f3e7a9dccb1d63af5
  • SHA256 ec89ee06be23502099170957ded0f6e6706b8bccd83e37a83a02521e65d9d52f
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest
11:e3:85:7c:5c:5a:89:03:6e:1c:88:d6:54:18:ed:be:6d:e2:03:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=www.trynow.com
Chains

Jan 30, 2026

Minor OS version
1
Major OS version
6
Entry point
419104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths