a70d40471a8830d460a5511f5e790171e1136a579da12e793d288f1c571fcd57

Analysis

max time kernel
149s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:30

Target
2026-04-16_b24fe0a28dfc03e3e39f1c17f74bbd9f_cobalt-strike_conti_elex.exe
Size 731KB
Sample260416-rt82dsa19n
SHA256 a70d40471a8830d460a5511f5e790171e1136a579da12e793d288f1c571fcd57
MD5 b24fe0a28dfc03e3e39f1c17f74bbd9f
SHA1 c6a9309f30a70a5e107b7a5f99797187b07d307d
SHA512 3d5cbb7afbcb34938422afa788faf2e831058be38ff802b1ec685b56c0fe3ba1987ac141810deabbb62ace82c268756ac7a6944f42eb9c299cf232965ef934cd
SSDEEP 12288:32RzSYN7c81N9iE9AWz02d3OVC+Ot1hCf1A5Ygna+E78r2Fv+qwlT:RYGWP9JJd3n+Otv2K5iP7i0+3lT
TLSH
T16DF4D781F3C32052EC96BB30ECAE571D47236664726C53FA250FDDF81A10670EAF9A65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1244	1116	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_b24fe0a28dfc03e3e39f1c17f74bbd9f_cobalt-strike_conti_elex.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_b24fe0a28dfc03e3e39f1c17f74bbd9f_cobalt-strike_conti_elex.exe"
1⤵
PID:1116
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1116 -s 8
  2⤵
  - Program crash
  PID:1244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1116 -ip 1116
1⤵
PID:380