General
- Target 2026-06-28_ebeffe17c2e2112b44870e3f491d4f4a_cobalt-strike_conti_elex_swisyn
- Size 408KB
- Sample260628-wsehlsbt8j
- SHA256 2266db0650c1eb4cbddc1b18afc32fd49a452c2fd094899718f1890ca73bb4ae
- MD5 ebeffe17c2e2112b44870e3f491d4f4a
- SHA1 da46c51fcc7d8979235b81479d82dc881bba79d1
- SHA512 63f37005a9b6f9e9f7fc27db23f82b2b9ba0bb938036174e9f335174296bc915e1e0c206f98b5f614759471cc558d4159e5f9850471f26621a350df06a71014e
- SSDEEP 6144:UsLqdufVUNDaynR/4k6e3kCFQMHuAqIc3w6Mzp9aDRf:PFUNDayRt6e3RKMuBL3Mzp9URf
- TLSH T12B947D13EA0120E9C826C1B555E7977AF932BC361660AE1F6750E7303D73A527EB870B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ebeffe17c2e2112b44870e3f491d4f4a_cobalt-strike_conti_elex_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ebeffe17c2e2112b44870e3f491d4f4a_cobalt-strike_conti_elex_swisyn.exe
Resource
win11ltsc2024-20260617-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_ebeffe17c2e2112b44870e3f491d4f4a_cobalt-strike_conti_elex_swisyn
- Size 408KB
- SHA256 2266db0650c1eb4cbddc1b18afc32fd49a452c2fd094899718f1890ca73bb4ae
- MD5 ebeffe17c2e2112b44870e3f491d4f4a
- SHA1 da46c51fcc7d8979235b81479d82dc881bba79d1
- SHA512 63f37005a9b6f9e9f7fc27db23f82b2b9ba0bb938036174e9f335174296bc915e1e0c206f98b5f614759471cc558d4159e5f9850471f26621a350df06a71014e
- SSDEEP 6144:UsLqdufVUNDaynR/4k6e3kCFQMHuAqIc3w6Mzp9aDRf:PFUNDayRt6e3RKMuBL3Mzp9URf
- TLSH T12B947D13EA0120E9C826C1B555E7977AF932BC361660AE1F6750E7303D73A527EB870B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory