General
- Target 2026-08-07_42ad80443c7f89f074d6d5ff40b44346_cobalt-strike_conti
- Size 94KB
- Sample260808-bwdehaxdrc
- SHA256 81d28f0687a93ca209221c2f0c7f0b6d90d23007b749ff2b05b28d40e50aef26
- MD5 42ad80443c7f89f074d6d5ff40b44346
- SHA1 95680eb1d884d43fce307da430db88c7ca50150e
- SHA512 c3ea9f4202f69363e54e36f3e38a2343f9cb32f32d1051623d105ab6ff8dcd34f342408ac0c02d3fcce6319f6db6bffc89d028120382114bf902c5e4ff21070b
- SSDEEP 1536:io7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:iEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T1B9931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_42ad80443c7f89f074d6d5ff40b44346_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_42ad80443c7f89f074d6d5ff40b44346_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_42ad80443c7f89f074d6d5ff40b44346_cobalt-strike_conti
- Size 94KB
- SHA256 81d28f0687a93ca209221c2f0c7f0b6d90d23007b749ff2b05b28d40e50aef26
- MD5 42ad80443c7f89f074d6d5ff40b44346
- SHA1 95680eb1d884d43fce307da430db88c7ca50150e
- SHA512 c3ea9f4202f69363e54e36f3e38a2343f9cb32f32d1051623d105ab6ff8dcd34f342408ac0c02d3fcce6319f6db6bffc89d028120382114bf902c5e4ff21070b
- SSDEEP 1536:io7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:iEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T1B9931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.