General
- Target 2026-02-02_ec28fdb0ccefddd386c166c236ebbe44_cobalt-strike
- Size 5.5MB
- Sample260202-cyd99abw4b
- SHA256 3bd9d247fc0d9557e92b517bb25d33248f884007c02cfc459359c6f3b8fe22cc
- MD5 ec28fdb0ccefddd386c166c236ebbe44
- SHA1 023c3a1696e87369e65cf33cfb4f8ffa37359182
- SHA512 d1848e0700c4db2893b4b3dc11cb57fea8d0e4cb68e4816fe3b887b5d4b433db45f7f3c910fad4d33c06832abdb5ffd145d4ecf2eca43cb7e995e68d85bf096d
- SSDEEP 49152:0dxFBRB9vbepc5hwwyqt2EVikloODL8IBuUue3yieZQjC0naSVENvgp7rnGrqWlO:SX9vOjk+yuUZ5G0J1
- TLSH T189463992B89919A5C67FF13490AC7351763138A443333BD32A9925EA097AFC47B3F718
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-02-02_ec28fdb0ccefddd386c166c236ebbe44_cobalt-strike.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
1
C2
-
http://138.226.237.35
Attributes
-
url_path
/5ebf2542be1b40e8.php
rc4.plain
rc4.plain
Targets
-
- Target 2026-02-02_ec28fdb0ccefddd386c166c236ebbe44_cobalt-strike
- Size 5.5MB
- SHA256 3bd9d247fc0d9557e92b517bb25d33248f884007c02cfc459359c6f3b8fe22cc
- MD5 ec28fdb0ccefddd386c166c236ebbe44
- SHA1 023c3a1696e87369e65cf33cfb4f8ffa37359182
- SHA512 d1848e0700c4db2893b4b3dc11cb57fea8d0e4cb68e4816fe3b887b5d4b433db45f7f3c910fad4d33c06832abdb5ffd145d4ecf2eca43cb7e995e68d85bf096d
- SSDEEP 49152:0dxFBRB9vbepc5hwwyqt2EVikloODL8IBuUue3yieZQjC0naSVENvgp7rnGrqWlO:SX9vOjk+yuUZ5G0J1
- TLSH T189463992B89919A5C67FF13490AC7351763138A443333BD32A9925EA097AFC47B3F718
- MD5 SHA1 SHA512 SSDEEP TLSH
Stealc family