General
- Target 4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222
- Size 191KB
- Sample260719-xd65rabz3t
- SHA256 4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222
- MD5 cd117e3a000b25b9b288950dc7556917
- SHA1 08f38e106e2c766dbd548bb8fb7735c990048585
- SHA512 654fde308d975bbc4604e5c010a1a81787fea9c8cca4609e7dafe4d0281fb47918a9da17159c41a25e157b49b14346e2b1387b74668ee39065ae20b3693e2d17
- SSDEEP 3072:fsQ1LTfD3r2e5Eel5Vs1mheI/rohDogm0V8wimg5ePe7cL:fs+/2e5EajeY3wiNWL
- TLSH T1C3146D36B7B580FAE866923889211906FB72BC058320AB4F176C47B65F37650DD3AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.122.1:443/KXbX
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Targets
-
- Target 4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222
- Size 191KB
- SHA256 4e1515d7d515bf3ea449213c851b89d3cba7f4801170cf394914dca0a01b0222
- MD5 cd117e3a000b25b9b288950dc7556917
- SHA1 08f38e106e2c766dbd548bb8fb7735c990048585
- SHA512 654fde308d975bbc4604e5c010a1a81787fea9c8cca4609e7dafe4d0281fb47918a9da17159c41a25e157b49b14346e2b1387b74668ee39065ae20b3693e2d17
- SSDEEP 3072:fsQ1LTfD3r2e5Eel5Vs1mheI/rohDogm0V8wimg5ePe7cL:fs+/2e5EajeY3wiNWL
- TLSH T1C3146D36B7B580FAE866923889211906FB72BC058320AB4F176C47B65F37650DD3AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.