General
- Target 2026-06-28_f99fdf0ecad4bcef3f75626ed042d233_cobalt-strike_conti_elex_swisyn
- Size 437KB
- Sample260628-weyz4aaz4p
- SHA256 5f64d2d813306c075c27919df61fa56c2f32ca720765dc549045b6b2bcd207f3
- MD5 f99fdf0ecad4bcef3f75626ed042d233
- SHA1 4f4ac7cc79111798d91f27d6d530d2344819c00b
- SHA512 dcabc50501ffc01db0a82e244643beda367d7f2fb13517d2bd834eb49ef7c9cc2bc3e626f8ce036ee3ceb380177d66b0cb4cd5fbbd19ae187e0882c1851f9f25
- SSDEEP 6144:UsLqdufVUNDawro5BXM4nntUNfJzeOxXe/:PFUNDaCYRniwgXe/
- TLSH T185945C4AEF809DDBC61542B19CEA83197334EE951B979F073929B3301D676C2BED120B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_f99fdf0ecad4bcef3f75626ed042d233_cobalt-strike_conti_elex_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_f99fdf0ecad4bcef3f75626ed042d233_cobalt-strike_conti_elex_swisyn.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f99fdf0ecad4bcef3f75626ed042d233_cobalt-strike_conti_elex_swisyn
- Size 437KB
- SHA256 5f64d2d813306c075c27919df61fa56c2f32ca720765dc549045b6b2bcd207f3
- MD5 f99fdf0ecad4bcef3f75626ed042d233
- SHA1 4f4ac7cc79111798d91f27d6d530d2344819c00b
- SHA512 dcabc50501ffc01db0a82e244643beda367d7f2fb13517d2bd834eb49ef7c9cc2bc3e626f8ce036ee3ceb380177d66b0cb4cd5fbbd19ae187e0882c1851f9f25
- SSDEEP 6144:UsLqdufVUNDawro5BXM4nntUNfJzeOxXe/:PFUNDaCYRniwgXe/
- TLSH T185945C4AEF809DDBC61542B19CEA83197334EE951B979F073929B3301D676C2BED120B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory