General
- Target 4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc
- Size 19KB
- Sample260724-h8z8cstycs
- SHA256 4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc
- MD5 bf6044702142055de0a04bf1461680fb
- SHA1 f9e8749fa0d0cd8a1088e3603d4d28543d5b9ecd
- SHA512 410a8b73a7637f101971e9e550dc1d059f56df91ab4439c40eec7d54443f24d0e2c9a815909063175ad0914ea2fc424d8385e105b89c3c3bc28b0fa2f25f8963
- SSDEEP 192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UwUUrNWF8qa1Dojjgi:jqaCF31cix+Dc4zjz5vFF46gi
- TLSH T17B92D93FE71368E9C106D57845FF3733DCB23DB385A6971E2724D2B42E106A46E6AA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.150.128:8888/8Azj
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; InfoPath.3)
Targets
-
- Target 4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc
- Size 19KB
- SHA256 4ac105954a9ed239eab2c89d806b40a00c2b7fa39593a487f86dad33fb3902cc
- MD5 bf6044702142055de0a04bf1461680fb
- SHA1 f9e8749fa0d0cd8a1088e3603d4d28543d5b9ecd
- SHA512 410a8b73a7637f101971e9e550dc1d059f56df91ab4439c40eec7d54443f24d0e2c9a815909063175ad0914ea2fc424d8385e105b89c3c3bc28b0fa2f25f8963
- SSDEEP 192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UwUUrNWF8qa1Dojjgi:jqaCF31cix+Dc4zjz5vFF46gi
- TLSH T17B92D93FE71368E9C106D57845FF3733DCB23DB385A6971E2724D2B42E106A46E6AA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.