General
- Target c35055499d7bf39198746a21bac07fb902e6307818898.exe
- Size 128KB
- Sample260710-dpklcacw4k
- SHA256 c35055499d7bf39198746a21bac07fb902e6307818898d6f961f3fdddaff5bde
- MD5 fd9284cedf382def729cf6450aec8e54
- SHA1 9ad4cd770ff008c6368b50661c59a2e436877b52
- SHA512 50bd6de8261ab4ac07a6a1df291efddd4a16a653dc2c9c9b76dfdb64168fbe020c13a02e69e26adcc4b32dc4ef4ff70e2ddaa793a2339b0594e62ff5fa86b345
- SSDEEP 1536:DFKkSAps4rasU4yamaCXRvW4eW3LNFNvtO1WUvMFMQiNsR8QHKH4RQ27:xK12PLivVLNFNvtOwdRPHKH0D7
- TLSH T1BFD33BC7AFA5DD97DD15473844E78319133AF3904B864B132D20AA351E23BE0BF9768A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c35055499d7bf39198746a21bac07fb902e6307818898.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c35055499d7bf39198746a21bac07fb902e6307818898.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://158.178.230.77:7443/3Jms
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)
Targets
-
- Target c35055499d7bf39198746a21bac07fb902e6307818898.exe
- Size 128KB
- SHA256 c35055499d7bf39198746a21bac07fb902e6307818898d6f961f3fdddaff5bde
- MD5 fd9284cedf382def729cf6450aec8e54
- SHA1 9ad4cd770ff008c6368b50661c59a2e436877b52
- SHA512 50bd6de8261ab4ac07a6a1df291efddd4a16a653dc2c9c9b76dfdb64168fbe020c13a02e69e26adcc4b32dc4ef4ff70e2ddaa793a2339b0594e62ff5fa86b345
- SSDEEP 1536:DFKkSAps4rasU4yamaCXRvW4eW3LNFNvtO1WUvMFMQiNsR8QHKH4RQ27:xK12PLivVLNFNvtOwdRPHKH0D7
- TLSH T1BFD33BC7AFA5DD97DD15473844E78319133AF3904B864B132D20AA351E23BE0BF9768A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.