General
- Target 4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6
- Size 9KB
- Sample260707-h19rtscs4w
- SHA256 4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6
- MD5 098326eb0962165e06df69f9808da9a1
- SHA1 f56d5320830630578ec8b2bb04774a00ec369f4c
- SHA512 ecb4841f682c2e8b939ebebb2d713fe4ce8a1475b9480ace5a0189aa3193f2ca01e22707eb5d02cb7efd9f1fe4a4ba01ba27891abf19bb8d4d74cb20af8ac59c
- SSDEEP 192:fQn0s8L+ZTTQPFbBNJ1el0uMSa86gUybh8sawHVG1YraxhL97e:fW0s8yZTTQPFNJeyuMSab28RwHnC37e
- TLSH T18A123B66F5D2206BC438DEB445B2337A3462341422305ED956588DB77FB37793A286CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6.dll
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6.dll
Resource
win11ltsc2024-20260706-en
1 signatures
900 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.73.129:8080/ZMJl
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Targets
-
- Target 4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6
- Size 9KB
- SHA256 4f7842b94b72bc995bbfcc7f7d6af0f165b43702edcc4b7edfad333606f996e6
- MD5 098326eb0962165e06df69f9808da9a1
- SHA1 f56d5320830630578ec8b2bb04774a00ec369f4c
- SHA512 ecb4841f682c2e8b939ebebb2d713fe4ce8a1475b9480ace5a0189aa3193f2ca01e22707eb5d02cb7efd9f1fe4a4ba01ba27891abf19bb8d4d74cb20af8ac59c
- SSDEEP 192:fQn0s8L+ZTTQPFbBNJ1el0uMSa86gUybh8sawHVG1YraxhL97e:fW0s8yZTTQPFNJeyuMSab28RwHnC37e
- TLSH T18A123B66F5D2206BC438DEB445B2337A3462341422305ED956588DB77FB37793A286CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.