General
- Target 946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254
- Size 19KB
- Sample260808-c1hqfsbb98
- SHA256 946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254
- MD5 69106d593a7bf42b425dc0099bec426f
- SHA1 ccce3448f813ec71a5c03e007bf0f595ef579fba
- SHA512 ebf75287ee4d6bdd81ece4eb8250a7cfdcad755ee726255e18f5195b9e3b49a01351bc2c0e9b94095082b366036624ffbe44e70685773a26414d50439b6e2add
- SSDEEP 192:/HUjPb3QN6qSCEMJAFbTBzyO+E+MH/clpZE0HSFWPjzH35328hCkNn2QjCsz:fUjDlrcAZ+ENuPF/HJAkVnjCW
- TLSH T14892D88DB21390E8DAA5E0F495EB8B75FA71FC620130AB3B1254D6781F31D83CA2D917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://134.175.120.219:443/4479nPVq
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4472.114 Safari/537.36
Targets
-
- Target 946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254
- Size 19KB
- SHA256 946f907db66720919372b285011f9773a4295dd3abf5ef54be5187f3bc63a254
- MD5 69106d593a7bf42b425dc0099bec426f
- SHA1 ccce3448f813ec71a5c03e007bf0f595ef579fba
- SHA512 ebf75287ee4d6bdd81ece4eb8250a7cfdcad755ee726255e18f5195b9e3b49a01351bc2c0e9b94095082b366036624ffbe44e70685773a26414d50439b6e2add
- SSDEEP 192:/HUjPb3QN6qSCEMJAFbTBzyO+E+MH/clpZE0HSFWPjzH35328hCkNn2QjCsz:fUjDlrcAZ+ENuPF/HJAkVnjCW
- TLSH T14892D88DB21390E8DAA5E0F495EB8B75FA71FC620130AB3B1254D6781F31D83CA2D917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.