General
- Target 2026-07-01_ce081ccbe217c02b4c2a5c5f70fbd2ec_cobalt-strike_conti
- Size 71KB
- Sample260701-jfa87sg12q
- SHA256 0f44b79a39a57f4284f03e357ba609f9162da145f3f202cc842505523f3ca0ea
- MD5 ce081ccbe217c02b4c2a5c5f70fbd2ec
- SHA1 0445224fac580a46682d4512794257f507dfd71e
- SHA512 2348ba28733da9f2bbe359229f3bf6a44d2ec7ea6600aa035b2599dace60c95861f1f2306c5055d7cf6f71a426f36411b3f0d2bc4e722a9d81387811ecd769af
- SSDEEP 1536:dG9rhhJ6rzD84Ps6xd9psZR64Djs0yjUHWr:M9t63BE6xdkrURr
- TLSH T12063F819B3A220FDC159D1B992EB56B3EA73F83011316FAE0394DE752F94CA16F2D610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ce081ccbe217c02b4c2a5c5f70fbd2ec_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ce081ccbe217c02b4c2a5c5f70fbd2ec_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ce081ccbe217c02b4c2a5c5f70fbd2ec_cobalt-strike_conti
- Size 71KB
- SHA256 0f44b79a39a57f4284f03e357ba609f9162da145f3f202cc842505523f3ca0ea
- MD5 ce081ccbe217c02b4c2a5c5f70fbd2ec
- SHA1 0445224fac580a46682d4512794257f507dfd71e
- SHA512 2348ba28733da9f2bbe359229f3bf6a44d2ec7ea6600aa035b2599dace60c95861f1f2306c5055d7cf6f71a426f36411b3f0d2bc4e722a9d81387811ecd769af
- SSDEEP 1536:dG9rhhJ6rzD84Ps6xd9psZR64Djs0yjUHWr:M9t63BE6xdkrURr
- TLSH T12063F819B3A220FDC159D1B992EB56B3EA73F83011316FAE0394DE752F94CA16F2D610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1