General
- Target 02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6.exe
- Size 17KB
- Sample260602-1xkyeaev3v
- SHA256 02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6
- MD5 92b5de72dcf5bf5202020e7d8d108176
- SHA1 b272e426baa2756f009fadd12707e1766766f1e3
- SHA512 bf6f3da017da3e1f689af33c39e43f6389503011d9ddd3b0b66833c31290a44e1fb46f55e0901c57268516719cf548fd2cba276496d0e4a084d3e9fd599d38de
- SSDEEP 192:EDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4+gB5uDdBUbOj6kxiY:EDMAoKz6WtKEj7aBDiegbAY
- TLSH T109820A7FB64228E9C127D17CC9EA2772ADF27122416B271F2FB8C7302E20979457D909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://3.208.96.244:80/Meeting/32251816/
Attributes
-
user_agent
Accept: */* Accept-Language: en-US Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Targets
-
- Target 02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6.exe
- Size 17KB
- SHA256 02d8294472a9eced7393e727f12f120dd9e0794f8867469c8a4083c7e577dea6
- MD5 92b5de72dcf5bf5202020e7d8d108176
- SHA1 b272e426baa2756f009fadd12707e1766766f1e3
- SHA512 bf6f3da017da3e1f689af33c39e43f6389503011d9ddd3b0b66833c31290a44e1fb46f55e0901c57268516719cf548fd2cba276496d0e4a084d3e9fd599d38de
- SSDEEP 192:EDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4+gB5uDdBUbOj6kxiY:EDMAoKz6WtKEj7aBDiegbAY
- TLSH T109820A7FB64228E9C127D17CC9EA2772ADF27122416B271F2FB8C7302E20979457D909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.