General
- Target 73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9.exe
- Size 19KB
- Sample260416-e8lhesfv2l
- SHA256 73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9
- MD5 e49c25d078e1e89abf32cdf5105e6bfb
- SHA1 14e48b139e847e7e0625da618df12567cf1e4c81
- SHA512 82aada784991239c54ac4d01173fb33bad1cc1bc8ca3640e6f612afede1b2d7733f3801ae98c858c81278f02a177cfe6192c1c1fcae4bc51bd9fd0b6d37f03f9
- SSDEEP 192:jV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Er+y3WF8qa1Dojjgi:NqaCF31cix+Dc4zjJmFF46gi
- TLSH T19292CA3FE71368E9C106D57845FF2732DCB13DB385A6971E1724D2B42E106A46FAEA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://172.16.19.59:8084/jFTY
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; NP06)
Targets
-
- Target 73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9.exe
- Size 19KB
- SHA256 73d95089da7c207d3e2c89079187f95ba92d388871fde500b545496feb749fb9
- MD5 e49c25d078e1e89abf32cdf5105e6bfb
- SHA1 14e48b139e847e7e0625da618df12567cf1e4c81
- SHA512 82aada784991239c54ac4d01173fb33bad1cc1bc8ca3640e6f612afede1b2d7733f3801ae98c858c81278f02a177cfe6192c1c1fcae4bc51bd9fd0b6d37f03f9
- SSDEEP 192:jV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Er+y3WF8qa1Dojjgi:NqaCF31cix+Dc4zjJmFF46gi
- TLSH T19292CA3FE71368E9C106D57845FF2732DCB13DB385A6971E1724D2B42E106A46FAEA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.