General
- Target e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58
- Size 356KB
- Sample260709-mevs1agw2q
- SHA256 e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58
- MD5 b75de0da52fd77cc134c452dd3175b8b
- SHA1 81a8cd1b687ed87c1e53aa829d2dd4115243612e
- SHA512 0737f97432de13c476a73498c00f34c770db3b30cf45d57904413f1c6c8f33729305d74ecaec0eb956aad74274615d57abdac82b3cae81017f52ee2e23661044
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLw:muqyxMLNplyon0BB
- TLSH T18C743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58
- Size 356KB
- SHA256 e91c6675721b93c2375303b8d75b1079fc68d29017e23d257a281b6189fb6a58
- MD5 b75de0da52fd77cc134c452dd3175b8b
- SHA1 81a8cd1b687ed87c1e53aa829d2dd4115243612e
- SHA512 0737f97432de13c476a73498c00f34c770db3b30cf45d57904413f1c6c8f33729305d74ecaec0eb956aad74274615d57abdac82b3cae81017f52ee2e23661044
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLw:muqyxMLNplyon0BB
- TLSH T18C743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.