General
- Target 2026-06-28_744e004516e3fab77c57c60a261d608e_cobalt-strike_conti_elex_swisyn
- Size 526KB
- Sample260628-1hw25aex61
- SHA256 16198dafefde07c289cd424a91f55ce9d8c167cec954b6bdf6aeaac9eddc157c
- MD5 744e004516e3fab77c57c60a261d608e
- SHA1 47c3888b993d752132924e4397c5321f7e5bad68
- SHA512 56479e1543a451fd14c5bc060067c80341f8cb7ed77ec1a972a61c52b1381317efdabfd743f02776fbaf746cb085f320b4b8cfb6ee3266855d569215d4e9f9ca
- SSDEEP 6144:UsLqdufVUNDazmHWwVA3FbucO31DfRUebf0p:PFUNDa6HvKFoZj0p
- TLSH T179B45C47FB809DDAC61442715CEE831A3739FA9517439F073A29B3301E63692FED660A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_744e004516e3fab77c57c60a261d608e_cobalt-strike_conti_elex_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_744e004516e3fab77c57c60a261d608e_cobalt-strike_conti_elex_swisyn.exe
Resource
win11ltsc2024-20260617-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_744e004516e3fab77c57c60a261d608e_cobalt-strike_conti_elex_swisyn
- Size 526KB
- SHA256 16198dafefde07c289cd424a91f55ce9d8c167cec954b6bdf6aeaac9eddc157c
- MD5 744e004516e3fab77c57c60a261d608e
- SHA1 47c3888b993d752132924e4397c5321f7e5bad68
- SHA512 56479e1543a451fd14c5bc060067c80341f8cb7ed77ec1a972a61c52b1381317efdabfd743f02776fbaf746cb085f320b4b8cfb6ee3266855d569215d4e9f9ca
- SSDEEP 6144:UsLqdufVUNDazmHWwVA3FbucO31DfRUebf0p:PFUNDa6HvKFoZj0p
- TLSH T179B45C47FB809DDAC61442715CEE831A3739FA9517439F073A29B3301E63692FED660A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory