2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti
Size 325KB
Sample260705-bg2hsabv9k
SHA256 4b67294bcd0bf49319f430dea7ccd24174a5ec84f9bc3c8bacf992a9eec86c01
MD5 d29d2ba1f449412c25b524425b62149f
SHA1 d486fb134d35c06d2c12c44696a3fe837a2c3552
SHA512 2ff3a4496e24824defd8fcca3f45788db39fb8c6c35870ea6b1759e54821ec175df14cb404cc2b7739ac6970d4ea6117c5077a38a511544fcea5ab7c26a413d5
SSDEEP 6144:i/za7ALXvWwG2iAP6S7BhVC0F0atud1Wiem+iaqFKQva8ITNgQ2:i/+r956d7Xs0lQiKBnF9vXU2
TLSH
T1F5642B80F944FDF5DCCA8FB914E2131953EAA181D71DDA2F7910FE3C001AA58E972A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti

File Explorer

2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti

.exe 325KB

2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti

IMPHASH dcd6616ced35c9ff2f2324bcd8004f33
SHA256 4b67294bcd0bf49319f430dea7ccd24174a5ec84f9bc3c8bacf992a9eec86c01
MD5 d29d2ba1f449412c25b524425b62149f
SHA1 d486fb134d35c06d2c12c44696a3fe837a2c3552
SHA512 2ff3a4496e24824defd8fcca3f45788db39fb8c6c35870ea6b1759e54821ec175df14cb404cc2b7739ac6970d4ea6117c5077a38a511544fcea5ab7c26a413d5
SSDEEP 6144:i/za7ALXvWwG2iAP6S7BhVC0F0atud1Wiem+iaqFKQva8ITNgQ2:i/+r956d7Xs0lQiKBnF9vXU2
TLSH
T1F5642B80F944FDF5DCCA8FB914E2131953EAA181D71DDA2F7910FE3C001AA58E972A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

600B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

228KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-05_d29d2ba1f449412c25b524425b62149f_cobalt-strike_conti

gdi32

kernel32

msvcrt

user32

generic