General
- Target 8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d
- Size 356KB
- Sample260501-xtdhdabx2t
- SHA256 8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d
- MD5 629134bd1d2524fc272033ede1c61295
- SHA1 89f5421b8d4f69ce8cf7797dd86ddcbeb298ecc7
- SHA512 75688653fb9b514bc438ea362992c29558fead70a4798bd60ab031dcdae0678b2e61e5414acbd3398adb157e67c99b13970e3dab0fdb8d9e580b649cb29a1873
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLG:muqyxMLNplyon0BB
- TLSH T186743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d
- Size 356KB
- SHA256 8981bb78c54bfd123ba796c5ef8aa55023d42d61576e5221cb5ebf31e490909d
- MD5 629134bd1d2524fc272033ede1c61295
- SHA1 89f5421b8d4f69ce8cf7797dd86ddcbeb298ecc7
- SHA512 75688653fb9b514bc438ea362992c29558fead70a4798bd60ab031dcdae0678b2e61e5414acbd3398adb157e67c99b13970e3dab0fdb8d9e580b649cb29a1873
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLG:muqyxMLNplyon0BB
- TLSH T186743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.