General
- Target 2026-05-27_47a7dea803a2cddbd6d18115ef74b678_conti
- Size 23KB
- Sample260527-tkf1csbw6p
- SHA256 517701024848665831ef545bbbc7098b6912297758c7c773879f0e6835c7d3af
- MD5 47a7dea803a2cddbd6d18115ef74b678
- SHA1 684c4c77c4f189bd062e698548c1669bc60ce8dc
- SHA512 5828bc557200e86577820d96ffdd8d1b9e4e622e6392a88c9ecb9ed88305e55664b230f854a030f2f37054aed12d5371c7df87e2f112c5fa42b946b7f629b48f
- SSDEEP 384:g6I6sPTTef8ciIvDZnf0X9HqwXmtXfAgyqULptg+CW:g6IzTTIli8ZfgmtPAHqEgNW
- TLSH T197B21A0FF25344D8CE89E2B4A4EB8774FA63FD260135963B1308DA346F60993DA2D10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_47a7dea803a2cddbd6d18115ef74b678_conti.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_47a7dea803a2cddbd6d18115ef74b678_conti.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://8.137.12.171:5555/dOGc
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BO1IE8_v1;ENUS)
Targets
-
- Target 2026-05-27_47a7dea803a2cddbd6d18115ef74b678_conti
- Size 23KB
- SHA256 517701024848665831ef545bbbc7098b6912297758c7c773879f0e6835c7d3af
- MD5 47a7dea803a2cddbd6d18115ef74b678
- SHA1 684c4c77c4f189bd062e698548c1669bc60ce8dc
- SHA512 5828bc557200e86577820d96ffdd8d1b9e4e622e6392a88c9ecb9ed88305e55664b230f854a030f2f37054aed12d5371c7df87e2f112c5fa42b946b7f629b48f
- SSDEEP 384:g6I6sPTTef8ciIvDZnf0X9HqwXmtXfAgyqULptg+CW:g6IzTTIli8ZfgmtPAHqEgNW
- TLSH T197B21A0FF25344D8CE89E2B4A4EB8774FA63FD260135963B1308DA346F60993DA2D10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.