General
- Target 0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b
- Size 40KB
- Sample260702-kjprfaex6t
- SHA256 0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b
- MD5 1a96a1e97184198c88b93593d1f7c49c
- SHA1 de42bb9ae1c3e66978dd41b93671cac9461c5fa2
- SHA512 52ad02c3c6a9116e318e30127365f6f306fef531ff404a167fd2325d7a6294f6f46cc41549d3df527c1f3ea54bb62dd15fe1c928dd4da4a6d80b5e076a0ec3ed
- SSDEEP 768:0YI5s5yGKj8/Xvik7nSV6fHUezlMU8+guySMOX4CroQj0UO4PmM3:YYeip7nSViHUODxICdnOL
- TLSH T11F136D8E33A395F8C106C67881E35F708DB1FC2244B09D7E5399EE311E15E565F3AA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://116.204.24.102:62231/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
Targets
-
- Target 0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b
- Size 40KB
- SHA256 0915d9b3569e7684a8434844a02dc1c8dadf3278dc52185e5bc995c50d72ca8b
- MD5 1a96a1e97184198c88b93593d1f7c49c
- SHA1 de42bb9ae1c3e66978dd41b93671cac9461c5fa2
- SHA512 52ad02c3c6a9116e318e30127365f6f306fef531ff404a167fd2325d7a6294f6f46cc41549d3df527c1f3ea54bb62dd15fe1c928dd4da4a6d80b5e076a0ec3ed
- SSDEEP 768:0YI5s5yGKj8/Xvik7nSV6fHUezlMU8+guySMOX4CroQj0UO4PmM3:YYeip7nSViHUODxICdnOL
- TLSH T11F136D8E33A395F8C106C67881E35F708DB1FC2244B09D7E5399EE311E15E565F3AA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.