General
- Target 2026-06-29_d02329a27f37219e586ba40a9705d95e_cobalt-strike_conti_elex_swisyn
- Size 437KB
- Sample260630-ds69hsd17p
- SHA256 edb406afb216a88ad92c363d2ea6eaa29f4c5fe67cf95bf837913c68a10705c5
- MD5 d02329a27f37219e586ba40a9705d95e
- SHA1 9ebf01a0f8587aef1a848a638b83d358b2c905b8
- SHA512 80d679411d050653dfe77daac7d7d1c043e5ff46b34a0a13fb1d8eba512901e3511d352c2b994dc05455d11ebd67e73bb598709829865c773188f2ae271b7627
- SSDEEP 6144:UsLqdufVUNDaqro5BXM4nntUNfJzeOxXe4:PFUNDaoYRniwgXe4
- TLSH T1FB945B56FF80ADFBDA1443714CAA83193335EE911B979F073A25B2301D63692BED520B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d02329a27f37219e586ba40a9705d95e_cobalt-strike_conti_elex_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d02329a27f37219e586ba40a9705d95e_cobalt-strike_conti_elex_swisyn.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d02329a27f37219e586ba40a9705d95e_cobalt-strike_conti_elex_swisyn
- Size 437KB
- SHA256 edb406afb216a88ad92c363d2ea6eaa29f4c5fe67cf95bf837913c68a10705c5
- MD5 d02329a27f37219e586ba40a9705d95e
- SHA1 9ebf01a0f8587aef1a848a638b83d358b2c905b8
- SHA512 80d679411d050653dfe77daac7d7d1c043e5ff46b34a0a13fb1d8eba512901e3511d352c2b994dc05455d11ebd67e73bb598709829865c773188f2ae271b7627
- SSDEEP 6144:UsLqdufVUNDaqro5BXM4nntUNfJzeOxXe4:PFUNDaoYRniwgXe4
- TLSH T1FB945B56FF80ADFBDA1443714CAA83193335EE911B979F073A25B2301D63692BED520B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory