General
- Target f9e33a893f540531aec128006fed7d16130c32d1e9ef3ad0d5ebeccd328923a3.zip
- Size 128KB
- Sample260722-c68ttshh59
- SHA256 8a2a3bf4fa40af55110187f2cd985fa30aef9f2531a1ff578cc4b05dc82c59dd
- MD5 1afcc01894d069e8488f1c0e287d35ca
- SHA1 fd296bd90330e5593b8310b6a9663a0e0536c1c0
- SHA512 c5261334f2c150776bcd6b6e634fff0d68e573ea402f6e4026e48c1ea831c5a0577368bb15910080a783a340b4dbd01e38dfdb4b88a04eee5357af5d3eecb04e
- SSDEEP 3072:j611mB2v4p6/k8uSurwySfKlT2TPI7Rpm+M43uFuNPLQ:mHmBqD/3orwJAv9ZQ
- TLSH T1BED3123AD7C21D34881631EF639A5F56F1B70B37A1AA83686BC3F68B55AB07C70405E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f9e33a893f540531aec128006fed7d16130c32d1e9ef3ad0d5ebeccd328923a3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
f9e33a893f540531aec128006fed7d16130c32d1e9ef3ad0d5ebeccd328923a3.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
cobaltstrike
-
391144938
-
beacon_type
4096
-
http_header1
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
http_header2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
polling_time
10000
-
port_number
4444
-
sc_process32
%windir%\syswow64\rundll32.exe
-
sc_process64
%windir%\sysnative\rundll32.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLk0oyITRyFKNuDjOGiPikuyFYIhg1XMvwJy3nh42RvJ3oSLBE/oGkoiHQNpwT2/GSTnSoAQ/qzm0Qc8y0cL67eLddCkq2Aa50dtBhDeNpGmnHMBuDvrMbiWQ617d13UJYXWHKCCWpqCAr7XavUsGqvtTgRXQfvpiLCS3SqIZlzwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
4096
-
unknown2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
watermark
391144938
Targets
-
- Target f9e33a893f540531aec128006fed7d16130c32d1e9ef3ad0d5ebeccd328923a3
- Size 264KB
- SHA256 f9e33a893f540531aec128006fed7d16130c32d1e9ef3ad0d5ebeccd328923a3
- MD5 c4d151229794197d3dbe32834c4a9812
- SHA1 1681f0a636f027c8dab3c935a01a4f717b625eac
- SHA512 c7ef92a83d10ecc860149ec1b6564ea8b410daad751bdb05f1097d3254ff468b2e52323ae7d14d08011067c9a42c3f579696e964a899b858544800fb842d016c
- SSDEEP 3072:S2nC99hpR1hl9MlkyAfg8j5jAkJLkXW8wTYHgX+l2atFDss4Y3D1cYJezJljk6It:S2nxAoo5jAkxThE9Dsz+cZjyGc
- TLSH T1FE444A5972A07CF5ECA7D63AC657461BEFF27C654630D70F03641A9A4F233A1A22E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10