General
- Target 6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4
- Size 19KB
- Sample260722-h8elnacb36
- SHA256 6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4
- MD5 fa2e859bc608bf943cf80bba29e8a210
- SHA1 da6a78dc450bd211bfb5e640af830de5ff12c07c
- SHA512 f021b66633920c2136b40eeea1da6fc883ee94656407181e8adc62df9a149c84b571aea5e0a9289371aec0fd56b45487c06c215f79df2b1c991c65ce365d3c73
- SSDEEP 192:BIV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2prWYBWF8qa1Dojjgi:UqaCF31cix+Dc4zj0eFF46gi
- TLSH T19B92EB3FE71368E9C106D57845FF3733DCB13DB385A6971E1724D2B42E106A46EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.141.108:11111/eaOH
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)
Targets
-
- Target 6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4
- Size 19KB
- SHA256 6932304ff75a0ba2aa8f14e81cd0a05be87d57ffdf0eec27da7030b8e746f0e4
- MD5 fa2e859bc608bf943cf80bba29e8a210
- SHA1 da6a78dc450bd211bfb5e640af830de5ff12c07c
- SHA512 f021b66633920c2136b40eeea1da6fc883ee94656407181e8adc62df9a149c84b571aea5e0a9289371aec0fd56b45487c06c215f79df2b1c991c65ce365d3c73
- SSDEEP 192:BIV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2prWYBWF8qa1Dojjgi:UqaCF31cix+Dc4zj0eFF46gi
- TLSH T19B92EB3FE71368E9C106D57845FF3733DCB13DB385A6971E1724D2B42E106A46EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.