Analysis
- max time kernel
149s - max time network
128s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 22:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0809998772b4599b9dc190b7a69d282c8c938992f12ddc6d25a3c04559872580.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0809998772b4599b9dc190b7a69d282c8c938992f12ddc6d25a3c04559872580.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 0809998772b4599b9dc190b7a69d282c8c938992f12ddc6d25a3c04559872580.exe
- Size 3.2MB
- Sample260602-2wpewafz7l
- SHA256 0809998772b4599b9dc190b7a69d282c8c938992f12ddc6d25a3c04559872580
- MD5 310340b428920e3e69f14d2aa6124770
- SHA1 4a952f16e5d657490cddd283912fb61498ce5db2
- SHA512 28fd42a021577922e6b0043f29e8f83b19cd384488656b0a15cf69545dd7dd68e70aca3e96307d9c27d40d436b36880cfc7bca5b1eccc9af83469a13a89c057f
- SSDEEP 49152:OIxI3RRv8rb/T0vO90dL3BmAFd4A64nsfJ/1jrVawigvQwzq8lcMD19d41wifjdD:U36jrkw2Id0FM2Pcdi
- TLSH T1E6F57C43BC9498A9C9EE9230C9B682917B707C444B3027C73B15BBB92E77BC45E79394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://84.247.155.115:80/bU2t
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MANM; MANM)
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.