General
- Target 31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345
- Size 51KB
- Sample260708-h4fcdsds8r
- SHA256 31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345
- MD5 63a864a6bdcc58d4fa21ecc188ddd565
- SHA1 3bd4efddbc97297798d8681d69782102246bf88d
- SHA512 4ef4493f991e04caad8a1725b3fbc1eff41fbc0bffc64b3e7f2c98cdcfd68417ad3e7562a5715a84e69fe33a3f97fa7f95aae41628ea79be4cb44722811c7416
- SSDEEP 768:jfGVjGd6iCsGA9jX49/O9Y8Neaho9S4AJKqBz8MZ6hjGHuaN:jq/O2d9S4A34v
- TLSH T15F333C2ADD17917BE71E4D78C103581ADD72BCD79BD1F5CBAB810DD20C25AE46B3A202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://113.45.62.193:80/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target 31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345
- Size 51KB
- SHA256 31485210bd62093379db926544a1e1268f25e5871c1c05072a86fc455aba6345
- MD5 63a864a6bdcc58d4fa21ecc188ddd565
- SHA1 3bd4efddbc97297798d8681d69782102246bf88d
- SHA512 4ef4493f991e04caad8a1725b3fbc1eff41fbc0bffc64b3e7f2c98cdcfd68417ad3e7562a5715a84e69fe33a3f97fa7f95aae41628ea79be4cb44722811c7416
- SSDEEP 768:jfGVjGd6iCsGA9jX49/O9Y8Neaho9S4AJKqBz8MZ6hjGHuaN:jq/O2d9S4A34v
- TLSH T15F333C2ADD17917BE71E4D78C103581ADD72BCD79BD1F5CBAB810DD20C25AE46B3A202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.