General
- Target 03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca.exe
- Size 19KB
- Sample260602-16bfbsfx5m
- SHA256 03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca
- MD5 5573a08bae02ed5f63a56000acaf309e
- SHA1 2fdb931b2b0efc230c0814484ac5c3a671b4c5fb
- SHA512 57768a373443fe7c0ecdf0f9aa0dc16e3c26d54c98c6bab46716da84b78d8a23dcd12ce9030f2d6f01e720ba2423d7f7effc15c6c3b4735fe49e6d9be8713b3a
- SSDEEP 192:HV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2xlUcSWF8qa1Dojjgi:xqaCF31cix+Dc4zjWFF46gi
- TLSH T1AE92D93FF71358E9C506D57845FB3732DCB139B385E6A72E1734D2B42E106A42EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://8.130.114.243:80/rmH6
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
Targets
-
- Target 03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca.exe
- Size 19KB
- SHA256 03c22311c0dbd0448c5e95983c9d7363338cc516ad92f9d1a524cd63d9ca0bca
- MD5 5573a08bae02ed5f63a56000acaf309e
- SHA1 2fdb931b2b0efc230c0814484ac5c3a671b4c5fb
- SHA512 57768a373443fe7c0ecdf0f9aa0dc16e3c26d54c98c6bab46716da84b78d8a23dcd12ce9030f2d6f01e720ba2423d7f7effc15c6c3b4735fe49e6d9be8713b3a
- SSDEEP 192:HV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2xlUcSWF8qa1Dojjgi:xqaCF31cix+Dc4zjWFF46gi
- TLSH T1AE92D93FF71358E9C506D57845FB3732DCB139B385E6A72E1734D2B42E106A42EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.