General
- Target 2026-08-07_526d34cce8c9c99cfbbe1f23e1340d4b_cobalt-strike_conti
- Size 94KB
- Sample260807-1rs2tsthna
- SHA256 501d3d958014e37d4802fe4cde69b356b0e72987366a6cedb83f4d92f1a348b0
- MD5 526d34cce8c9c99cfbbe1f23e1340d4b
- SHA1 bb6d2895da899a125e77b8e3590d572cac8b58e7
- SHA512 f3cf691cf0121d23cc1712e3effcfde50ec0e8ed20c50a1f8c9739e378a27ca03acd5b4a2f3da7dc44bbbbb3d6b0d760393d719d3c7b252be6e6bcdb2a266b0e
- SSDEEP 1536:Bo7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:BEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T1E2931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_526d34cce8c9c99cfbbe1f23e1340d4b_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_526d34cce8c9c99cfbbe1f23e1340d4b_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_526d34cce8c9c99cfbbe1f23e1340d4b_cobalt-strike_conti
- Size 94KB
- SHA256 501d3d958014e37d4802fe4cde69b356b0e72987366a6cedb83f4d92f1a348b0
- MD5 526d34cce8c9c99cfbbe1f23e1340d4b
- SHA1 bb6d2895da899a125e77b8e3590d572cac8b58e7
- SHA512 f3cf691cf0121d23cc1712e3effcfde50ec0e8ed20c50a1f8c9739e378a27ca03acd5b4a2f3da7dc44bbbbb3d6b0d760393d719d3c7b252be6e6bcdb2a266b0e
- SSDEEP 1536:Bo7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:BEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T1E2931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.