General
- Target 9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c
- Size 256KB
- Sample260717-k3c7rabw91
- SHA256 9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c
- MD5 ef7fe5f5ee5bf3035a454e0bfae39d14
- SHA1 766750f9d4ce89ef358ff23990dee528f62a1f0a
- SHA512 fa6870ebc7ec1b2486e833b79fc10f4734e2956b9abd56b4d42d4a16d18d9c29717709032a845e02787bf43caed98d48bfde4a73c384b070860a88e713ce07bd
- SSDEEP 3072:WC58CgfzAV8MqyB4sudn5Ow8gxXzVBGMsRr2NeOR8jjZ/lIAi6/Ffo+JYLHAy:PORdDPkznZnaA
- TLSH T1C1444AA6A6A508F5EE778139C9064605EBF2FC560770EBDB43900EA64E336E0DE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.139.128:8888/mVd6
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; LBBROWSER)
Targets
-
- Target 9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c
- Size 256KB
- SHA256 9d4ef672b7b31eb4e0ab314fd38372b6b43fe3f884c4dff1009d8687ca1be55c
- MD5 ef7fe5f5ee5bf3035a454e0bfae39d14
- SHA1 766750f9d4ce89ef358ff23990dee528f62a1f0a
- SHA512 fa6870ebc7ec1b2486e833b79fc10f4734e2956b9abd56b4d42d4a16d18d9c29717709032a845e02787bf43caed98d48bfde4a73c384b070860a88e713ce07bd
- SSDEEP 3072:WC58CgfzAV8MqyB4sudn5Ow8gxXzVBGMsRr2NeOR8jjZ/lIAi6/Ffo+JYLHAy:PORdDPkznZnaA
- TLSH T1C1444AA6A6A508F5EE778139C9064605EBF2FC560770EBDB43900EA64E336E0DE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.