General
- Target b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1
- Size 19KB
- Sample260807-t8x9jszeng
- SHA256 b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1
- MD5 99943a3f70cfe12599a3d320f7188013
- SHA1 ae1e5d193aea43a3441f7dd1e56edc50c294ea66
- SHA512 716571ddcc21dd2357c5c64c07ae95c6ab33f8847bbca3aa75e41f957278b6cba8c0f9870b3182e11772d5b94e3eb38651158eb4377689309b1ee84011e65033
- SSDEEP 192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KbtZrgWF8qa1Dojjgi:RqaCF31cix+Dc4zj1btplFF46gi
- TLSH T15692EB3FE70368E9C106D57845FB7733DCB53DB385A6A32A2734D2B42E106A42E6E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.1.123:443/LyUC
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)
Targets
-
- Target b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1
- Size 19KB
- SHA256 b19a8dd3d8c24deafc3866972184d48fcc33d7ee618e7247e4bc0eb9b9dad2c1
- MD5 99943a3f70cfe12599a3d320f7188013
- SHA1 ae1e5d193aea43a3441f7dd1e56edc50c294ea66
- SHA512 716571ddcc21dd2357c5c64c07ae95c6ab33f8847bbca3aa75e41f957278b6cba8c0f9870b3182e11772d5b94e3eb38651158eb4377689309b1ee84011e65033
- SSDEEP 192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KbtZrgWF8qa1Dojjgi:RqaCF31cix+Dc4zj1btplFF46gi
- TLSH T15692EB3FE70368E9C106D57845FB7733DCB53DB385A6A32A2734D2B42E106A42E6E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.