General
- Target b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a
- Size 17KB
- Sample260702-l339lses5q
- SHA256 b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a
- MD5 aa696477b3b64d2a424fdf02fbe74d9b
- SHA1 dd7a11720b3f1c184487aa568989b9cee7fd07a0
- SHA512 570f9f33299e2e00c1a38bed705c9b6e3387730cd86bca6f4ad010156f44cc712b76be7fc1ca0f645e7e164af84cbde44c937fc0dcad61e982ea67bcec748fa4
- SSDEEP 192:zMD9tEXopVhIRMpKMdAyfZywEKh90t/cmcD2ycYycAk8LET9:zG9NLhzpKMdDZIW0imkaEABi
- TLSH T14E72B43E3B1388EAC159D4B4C1F79F35AD70FD034AD1473A42B4EAB20F756612A2AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a.exe
Resource
win11ltsc2024-20260630-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://47.99.132.164:8009/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
Targets
-
- Target b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a
- Size 17KB
- SHA256 b898f097a7096002a6bcb72f58a9431935b53bc056d1dccd2e1b35319f87aa2a
- MD5 aa696477b3b64d2a424fdf02fbe74d9b
- SHA1 dd7a11720b3f1c184487aa568989b9cee7fd07a0
- SHA512 570f9f33299e2e00c1a38bed705c9b6e3387730cd86bca6f4ad010156f44cc712b76be7fc1ca0f645e7e164af84cbde44c937fc0dcad61e982ea67bcec748fa4
- SSDEEP 192:zMD9tEXopVhIRMpKMdAyfZywEKh90t/cmcD2ycYycAk8LET9:zG9NLhzpKMdDZIW0imkaEABi
- TLSH T14E72B43E3B1388EAC159D4B4C1F79F35AD70FD034AD1473A42B4EAB20F756612A2AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.