General
- Target 81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa
- Size 1.1MB
- Sample260718-wefthsg18n
- SHA256 81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa
- MD5 0783dc57790f38e42bced70047a19297
- SHA1 fe8d24bd45ec2ade48458cffe5461fca8e981954
- SHA512 35422caf8e10785dea7c97f5343855e688bd016666684db39df9b9763ac0aab893007d62a3cc6f623fff13394d3c55a0bd0cc57aaa6913af9c66e0dd30808ba0
- SSDEEP 12288:slcbEp+evfIYyAfiHYezmlNZlF8iueA/s939XpbPeleP1W3nK2esBWAu9Y:slcbEpfWAaHYICNJ9xPelesXK2bB6
- TLSH T19C453A0BBCA104FAD0AB5332896661A1BB71BC450F3223C72E50B6793F7A7E49D79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.0.15:80/osF5
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)
Targets
-
- Target 81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa
- Size 1.1MB
- SHA256 81e95f6dc2db09af6fbb48f4c9c4ac5ec7c5e0d6ae2f5366af61fa2e45bd41aa
- MD5 0783dc57790f38e42bced70047a19297
- SHA1 fe8d24bd45ec2ade48458cffe5461fca8e981954
- SHA512 35422caf8e10785dea7c97f5343855e688bd016666684db39df9b9763ac0aab893007d62a3cc6f623fff13394d3c55a0bd0cc57aaa6913af9c66e0dd30808ba0
- SSDEEP 12288:slcbEp+evfIYyAfiHYezmlNZlF8iueA/s939XpbPeleP1W3nK2esBWAu9Y:slcbEpfWAaHYICNJ9xPelesXK2bB6
- TLSH T19C453A0BBCA104FAD0AB5332896661A1BB71BC450F3223C72E50B6793F7A7E49D79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.