General
- Target 0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937.exe
- Size 356KB
- Sample260421-17dbbaf19s
- SHA256 0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937
- MD5 3ac82407b68fee78afe8e1fbd68bcee1
- SHA1 50f0beb0f3a49e3dd23451d8e2e82c059f15d56c
- SHA512 922c1578c3f80f886bdbb6b44da1581c8e708d7b568a56a3ea90740e6296514fe331a223c40d1752899c7dac2fad48fe32b9e265d2958ff441a6e32daba27f96
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLL:muqyxMLNplyon0BB
- TLSH T164743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937.exe
- Size 356KB
- SHA256 0a116acc9616e00f8b4e353580240838d16057515e6a44287e439c161cd93937
- MD5 3ac82407b68fee78afe8e1fbd68bcee1
- SHA1 50f0beb0f3a49e3dd23451d8e2e82c059f15d56c
- SHA512 922c1578c3f80f886bdbb6b44da1581c8e708d7b568a56a3ea90740e6296514fe331a223c40d1752899c7dac2fad48fe32b9e265d2958ff441a6e32daba27f96
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLL:muqyxMLNplyon0BB
- TLSH T164743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.