General
- Target 206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476
- Size 13KB
- Sample260718-ltgdgsfv7k
- SHA256 206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476
- MD5 020c3fa3b2ef73935cf32251a307ca8b
- SHA1 6b93f697c00ca01e6aaddaffd472aaf8fbdd17e2
- SHA512 ab1628861f70e516019ca6619420b0ddd247127b32f104102a1d3b2e3166765e045976a79ae001a53ae8b40919df9e1bb4390eb85b0b6beec042c6706ec55fe5
- SSDEEP 192:kbk55WUXOvuAY7qB0shSTo6MqB3eT/LRH+3aPmrEJ8YNEQcG37E5pz6hWT:kwLXOvuVUhST/Pi/LdT7
- TLSH T161523943B7494DA3D744237900BB974AC37BBE1D1F54AED39F8998A90624BD0F43A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.182.149:8888/axN6
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)
Targets
-
- Target 206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476
- Size 13KB
- SHA256 206908514d26f674c3350127b5db664dad252ed333589d950e6d6a7da5499476
- MD5 020c3fa3b2ef73935cf32251a307ca8b
- SHA1 6b93f697c00ca01e6aaddaffd472aaf8fbdd17e2
- SHA512 ab1628861f70e516019ca6619420b0ddd247127b32f104102a1d3b2e3166765e045976a79ae001a53ae8b40919df9e1bb4390eb85b0b6beec042c6706ec55fe5
- SSDEEP 192:kbk55WUXOvuAY7qB0shSTo6MqB3eT/LRH+3aPmrEJ8YNEQcG37E5pz6hWT:kwLXOvuVUhST/Pi/LdT7
- TLSH T161523943B7494DA3D744237900BB974AC37BBE1D1F54AED39F8998A90624BD0F43A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.