General
- Target 3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db
- Size 19KB
- Sample260528-db99vaes3m
- SHA256 3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db
- MD5 868536e9813027f4ee1aa397e80b4e48
- SHA1 274633f56fbb224c60845b3e7b4c965ed7bbf527
- SHA512 728dd1e47385b9738f707753cde844c00870def3804282686a7243349b4541ba8cb939c65f6647623af0a08e3885fa00a9060a0a3cf4920030585771dfdaa3e4
- SSDEEP 192:X+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/21RRK2v9zWF8qa1Dojjgi:YqaCF31cix+Dc4zjT2lKFF46gi
- TLSH T14292EA3FE71368E9C106D57845FF3732DCB17DB385A6932E2724D2B42E106A46FAA610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.234.139:6667/HDfk
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; Avant Browser)
Targets
-
- Target 3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db
- Size 19KB
- SHA256 3cb74a995589ae484cb9a5e717edcc196fa78eaa5f3d5435abb0a6d03e7407db
- MD5 868536e9813027f4ee1aa397e80b4e48
- SHA1 274633f56fbb224c60845b3e7b4c965ed7bbf527
- SHA512 728dd1e47385b9738f707753cde844c00870def3804282686a7243349b4541ba8cb939c65f6647623af0a08e3885fa00a9060a0a3cf4920030585771dfdaa3e4
- SSDEEP 192:X+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/21RRK2v9zWF8qa1Dojjgi:YqaCF31cix+Dc4zjT2lKFF46gi
- TLSH T14292EA3FE71368E9C106D57845FF3732DCB17DB385A6932E2724D2B42E106A46FAA610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.