2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti
Size 245KB
Sample260808-dln5csgn5z
SHA256 2cacc7fb5326bdb1d1fe078d5cee29b7d1ef9693fdc087854c508adaa24af586
MD5 95be720b37ddd06b6844164f3b544de1
SHA1 6e4d130549603c3dfa633bc244470572dd6b962d
SHA512 fa0c028bdca41191bbbff6946c4f2fa0efc0a0e4aa0df4aff10b26beab284b17609f7f4bf549a17e14c5322dabf18baba4826e477e5244120bcd93e1b0f86710
SSDEEP 6144:wAADzE92Cn44pz812VN/E1R/TanU0Zg0:FAFC4V1bR7anj
TLSH
T15334191AE3931CFDC917817992AB9372E533FC211330EA6F1755DF322E66C640A5EA24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti

File Explorer

2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti

.exe 245KB

2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti

IMPHASH 314e3e2b66d2355d994a270a8bc06e21
SHA256 2cacc7fb5326bdb1d1fe078d5cee29b7d1ef9693fdc087854c508adaa24af586
MD5 95be720b37ddd06b6844164f3b544de1
SHA1 6e4d130549603c3dfa633bc244470572dd6b962d
SHA512 fa0c028bdca41191bbbff6946c4f2fa0efc0a0e4aa0df4aff10b26beab284b17609f7f4bf549a17e14c5322dabf18baba4826e477e5244120bcd93e1b0f86710
SSDEEP 6144:wAADzE92Cn44pz812VN/E1R/TanU0Zg0:FAFC4V1bR7anj
TLSH
T15334191AE3931CFDC917817992AB9372E533FC211330EA6F1755DF322E66C640A5EA24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetUserNameA RegCloseKey RegOpenKeyExW RegSetValueExW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDIBits SelectObject

kernel32

AddAtomA AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileW CreateMutexA CreateSemaphoreA DeleteAtom DeleteCriticalSection DuplicateHandle EnterCriticalSection FileTimeToSystemTime FindAtomA FormatMessageA GetAtomNameA GetComputerNameA GetConsoleWindow GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetHandleInformation GetLastError GetModuleFileNameW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessTimes GetStartupInfoA GetSystemInfo GetSystemTimeAdjustment GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalUnlock InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseMutex ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _beginthreadex _cexit _close _commode _endthreadex _errno _fmode _initterm _memccpy _onexit _pclose _popen _read _setjmp _strdup _ultoa _write abort calloc exit fgets fprintf fputc fputs free fwrite getenv islower isspace isupper localeconv longjmp malloc memchr memcmp memcpy memmove memset printf realloc signal strcmp strerror strlen strncmp vfprintf wcslen

user32

GetDC GetSystemMetrics ReleaseDC ShowWindow

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest

Name

.text

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

996B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_95be720b37ddd06b6844164f3b544de1_cobalt-strike_conti

advapi32

gdi32

kernel32

msvcrt

user32

winhttp

generic