General
- Target 3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9.exe
- Size 356KB
- Sample260529-zsys2aet8t
- SHA256 3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9
- MD5 f2082fbb4fd0bc45c0b4d95bc5b7de7b
- SHA1 cf21eb759f3f4f93a2c6e8edf1a037ab630418bb
- SHA512 42fc25b3785d1404ca631e8f0f5c78a1e5f02b3126504c64d675ad1ca50a4bce79663e9260708a659df612ba0c0bb116a8ec420139d97438aecfa3d618dd9354
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLw:muqyxMLNplyon0BB
- TLSH T11F743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68565DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9.exe
- Size 356KB
- SHA256 3a1757e8406c6e1306730efaf9084a9f61e542734ae3a55f529ec0c41a92f7c9
- MD5 f2082fbb4fd0bc45c0b4d95bc5b7de7b
- SHA1 cf21eb759f3f4f93a2c6e8edf1a037ab630418bb
- SHA512 42fc25b3785d1404ca631e8f0f5c78a1e5f02b3126504c64d675ad1ca50a4bce79663e9260708a659df612ba0c0bb116a8ec420139d97438aecfa3d618dd9354
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLw:muqyxMLNplyon0BB
- TLSH T11F743838BA25DCE4CB2FB1B489212E4551713C0B8730E69FA68565DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.