General
- Target a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b
- Size 71KB
- Sample260710-evxzasd19x
- SHA256 a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b
- MD5 6a0fb361981b3f8e93512eaccf633b5d
- SHA1 4d517d527100cd0ca232b2172349b616dba2daf7
- SHA512 72df4df841af71adf966b22bad03d657cae8d70661e43e5ca441bae0a848dd7589bc877b81d9163d3f2245c3f7fc1e83d2ea9ebe0626f8e4c14cbf47557514cf
- SSDEEP 768:TbKrnYUV8GJ9dJhjilZXgL7rEJoF9/GwNfjF0fnlc:fKrnV+ZZXgL7oJoG0rFMa
- TLSH T15A6392A215EA4C4BF5E7533078F28520B674FA65DF0BA72FA00421382633BC55FD7A99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://115.190.121.129:8081/YHZb
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Targets
-
- Target a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b
- Size 71KB
- SHA256 a40b065332f04ec7d625dd61d81e41abf2995e4248c7c771b2f6aff1433a356b
- MD5 6a0fb361981b3f8e93512eaccf633b5d
- SHA1 4d517d527100cd0ca232b2172349b616dba2daf7
- SHA512 72df4df841af71adf966b22bad03d657cae8d70661e43e5ca441bae0a848dd7589bc877b81d9163d3f2245c3f7fc1e83d2ea9ebe0626f8e4c14cbf47557514cf
- SSDEEP 768:TbKrnYUV8GJ9dJhjilZXgL7rEJoF9/GwNfjF0fnlc:fKrnV+ZZXgL7oJoG0rFMa
- TLSH T15A6392A215EA4C4BF5E7533078F28520B674FA65DF0BA72FA00421382633BC55FD7A99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.