General
- Target 5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2
- Size 19KB
- Sample260803-sfcayaej7y
- SHA256 5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2
- MD5 6b71d00db538523f2bd19a6d82c7386b
- SHA1 c1cf11248b63ab2ab83ff1afb15127efe85b9311
- SHA512 cc790209b92ad5703d39ef387a7d7b612eeb1b93ec142e78f43de74588256b320a5dbc8067255590668a5c6e8ff114dc22673a44d5cf57cdf80b83eeaec96b14
- SSDEEP 192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LkQWF8qa1Dojjgi:5qaCF31cix+Dc4zjfFF46gi
- TLSH T13592FB3FE31368E9C106D57845FB3732DCB13DB385F6972E2724D1B42E106A46EAAA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://38.38.38.130:85/lu9C
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Targets
-
- Target 5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2
- Size 19KB
- SHA256 5c1032d87f40d7c5e35fa6c5d434eb9cb048616d6164e0e89d8f1e11103990c2
- MD5 6b71d00db538523f2bd19a6d82c7386b
- SHA1 c1cf11248b63ab2ab83ff1afb15127efe85b9311
- SHA512 cc790209b92ad5703d39ef387a7d7b612eeb1b93ec142e78f43de74588256b320a5dbc8067255590668a5c6e8ff114dc22673a44d5cf57cdf80b83eeaec96b14
- SSDEEP 192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LkQWF8qa1Dojjgi:5qaCF31cix+Dc4zjfFF46gi
- TLSH T13592FB3FE31368E9C106D57845FB3732DCB13DB385F6972E2724D1B42E106A46EAAA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.