General
- Target 68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c
- Size 356KB
- Sample260804-n5e1xavzht
- SHA256 68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c
- MD5 3e35ced60973eac78a125e984a03edb0
- SHA1 27b4f58c5da318344b5636f2b0b6065b87a77c43
- SHA512 c07301933716ff20acf1f5a144da6b6af81e5b6f9d10e22f7f9db55941081237022e840b95eff0d28a7f0b1c8b59ec8e03e5a5b9aa04c8e46c4e77fdeb8ad400
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLK:muqyxMLNplyon0BB
- TLSH T1F4743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c
- Size 356KB
- SHA256 68afd72db48005e6aa7b64aa739e6bfedd55da3c7f3a5fa840fef82eb85ffd8c
- MD5 3e35ced60973eac78a125e984a03edb0
- SHA1 27b4f58c5da318344b5636f2b0b6065b87a77c43
- SHA512 c07301933716ff20acf1f5a144da6b6af81e5b6f9d10e22f7f9db55941081237022e840b95eff0d28a7f0b1c8b59ec8e03e5a5b9aa04c8e46c4e77fdeb8ad400
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLK:muqyxMLNplyon0BB
- TLSH T1F4743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.