General
- Target b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb
- Size 356KB
- Sample260717-xpqbdabv6j
- SHA256 b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb
- MD5 188697d782c8dbeaa05c91debb80f67b
- SHA1 bc1bdd99e68b62873dc6d2724411db9def108cc8
- SHA512 16ee3bd175adf4a5c54a9f568834da3efbf9b9a1b119cfe275ced728469ab9ae0cade7ba8729db86d5f182bdc8a0dfe8fbbc33656ceebad3b2e30efb4e6f28f0
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL0:muqyxMLNplyon0BB
- TLSH T123743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb
- Size 356KB
- SHA256 b41004a3167bce80edd0a54b4ecf7d58ebacd28d77947f2acb68f0c81ec45efb
- MD5 188697d782c8dbeaa05c91debb80f67b
- SHA1 bc1bdd99e68b62873dc6d2724411db9def108cc8
- SHA512 16ee3bd175adf4a5c54a9f568834da3efbf9b9a1b119cfe275ced728469ab9ae0cade7ba8729db86d5f182bdc8a0dfe8fbbc33656ceebad3b2e30efb4e6f28f0
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL0:muqyxMLNplyon0BB
- TLSH T123743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.