General
- Target H64.exe
- Size 667KB
- Sample260703-g3etssct2x
- SHA256 e6084b5a88a98de3fdeb3a5dc69d7edd743b9ca9a3699812dac910fd036dabe5
- MD5 c2e7fd434ffd26c4f073abd143308111
- SHA1 45d7778629af8d8f1316cd21a9cf5cecc1617f79
- SHA512 fa387b6c21259546b3b146343a6985db245eca491b1007583f847968171e21cf2871f3b9f9680cf57d895f3f5954e0eb245a0b319855930a23a8d4195f4d522b
- SSDEEP 12288:0CthcVTaB4/ydUNGBQKA3ggCgLwf4HvWooU3Mkqt:0CthcadUNdT3SAHvB4
- TLSH T107E45D4AB7B440F5D066C13AC9128B6AE7F2BC514B70834F435197AF5F376A19F2A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
H64.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
H64.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://repshd.com:443/Menus.aspx
Attributes
-
user_agent
Accept: */* Accept-Language: en-US,en;q=0.5 Referer: https://locations.smashburger.com/us/ky/louisville/312-s-fourth-st.html Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target H64.exe
- Size 667KB
- SHA256 e6084b5a88a98de3fdeb3a5dc69d7edd743b9ca9a3699812dac910fd036dabe5
- MD5 c2e7fd434ffd26c4f073abd143308111
- SHA1 45d7778629af8d8f1316cd21a9cf5cecc1617f79
- SHA512 fa387b6c21259546b3b146343a6985db245eca491b1007583f847968171e21cf2871f3b9f9680cf57d895f3f5954e0eb245a0b319855930a23a8d4195f4d522b
- SSDEEP 12288:0CthcVTaB4/ydUNGBQKA3ggCgLwf4HvWooU3Mkqt:0CthcadUNdT3SAHvB4
- TLSH T107E45D4AB7B440F5D066C13AC9128B6AE7F2BC514B70834F435197AF5F376A19F2A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.