General
- Target 9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77
- Size 10KB
- Sample260707-jnellah15q
- SHA256 9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77
- MD5 12baedc19d4d27932c5db30a302e2377
- SHA1 65852c4a8a49e575d2f04564dc4b1365ac69aa86
- SHA512 4d27159e09d7c6df72c19e6a00189209658f5c6a4eb0c25dbbd62b2206d83167ceaa337fb83189fadc47678b9f76ff23537940682f8bf37c69d6639f770f2714
- SSDEEP 192:+ZnQAbQO5sM1IPNtDjsqSYNDcaM9lIwtKdRtpNTckR5ghWXie:UQAE8N1IPNtDEYNovQdRDuDze
- TLSH T177222B03E1A335AFDD1ED6304AA6336128B2345855209DF52A40DDBE2B47B173B697CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77.dll
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.73.129:8080/ZMJl
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Targets
-
- Target 9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77
- Size 10KB
- SHA256 9efebf489990e4cd4f9bb4b36c049b7fe967a0c6c758c9be00daa98b4c00dd77
- MD5 12baedc19d4d27932c5db30a302e2377
- SHA1 65852c4a8a49e575d2f04564dc4b1365ac69aa86
- SHA512 4d27159e09d7c6df72c19e6a00189209658f5c6a4eb0c25dbbd62b2206d83167ceaa337fb83189fadc47678b9f76ff23537940682f8bf37c69d6639f770f2714
- SSDEEP 192:+ZnQAbQO5sM1IPNtDjsqSYNDcaM9lIwtKdRtpNTckR5ghWXie:UQAE8N1IPNtDEYNovQdRDuDze
- TLSH T177222B03E1A335AFDD1ED6304AA6336128B2345855209DF52A40DDBE2B47B173B697CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.