Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/07/2026, 10:57
General
- Target 2026-07-26_4094d227718cab247226a24fde2de2ae_cobalt-strike_conti.exe
- Size 172KB
- Sample260726-m18lzstdrd
- SHA256 8a1932d0fb76a44bade82baf50e0dba921bd71ff79f2b708fe364f198119d520
Score
10/10
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
127.0.0.1:5552
Mutex
-
279f6960ed84a752570aca7fb2dc1552
Attributes
-
reg_key
279f6960ed84a752570aca7fb2dc1552
-
splitter
|'|'|
Signatures
- Family: njRAT/Bladabindi
Widely used RAT written in .NET.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-26_4094d227718cab247226a24fde2de2ae_cobalt-strike_conti.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-26_4094d227718cab247226a24fde2de2ae_cobalt-strike_conti.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4888-0-0x00007FF635890000-0x00007FF6358C2000-memory.dmp
memory/4888-1-0x00007FF63589D000-0x00007FF6358B9000-memory.dmp
memory/4888-8-0x0000000140000000-0x0000000140021000-memory.dmp
memory/4888-19-0x00007FF635890000-0x00007FF6358C2000-memory.dmp
memory/4888-20-0x000001AADBF10000-0x000001AADBF1C000-memory.dmp
memory/4888-21-0x00007FF63589D000-0x00007FF6358B9000-memory.dmp