General
- Target 8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de
- Size 356KB
- Sample260527-rb255ahs81
- SHA256 8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de
- MD5 c59a78123b0d26908a4e0c9afb673c44
- SHA1 2246b869e9869db6d4280c40d7e348d6360a7dbc
- SHA512 c039317fc9ab8a0046599e0a289d9f7667479c40bc6ba75653d25cdde2871ed4f1c277114134cd6432d4e113bff6ef41ea4a2468860df799ac1eb5c0305dd619
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLR:muqyxMLNplyon0BB
- TLSH T198743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68565DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de
- Size 356KB
- SHA256 8e3ee536d995127700b31e09a38e98e87f4573e9401ebe8c825adf952f8317de
- MD5 c59a78123b0d26908a4e0c9afb673c44
- SHA1 2246b869e9869db6d4280c40d7e348d6360a7dbc
- SHA512 c039317fc9ab8a0046599e0a289d9f7667479c40bc6ba75653d25cdde2871ed4f1c277114134cd6432d4e113bff6ef41ea4a2468860df799ac1eb5c0305dd619
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLR:muqyxMLNplyon0BB
- TLSH T198743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68565DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.