General
- Target cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5
- Size 18KB
- Sample260808-kfjq1stamb
- SHA256 cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5
- MD5 ad21bd60212218ff1d5ec24586ebd024
- SHA1 1d857682dd89f4187f4844970e261e5628802b1c
- SHA512 ba9f8a75185613e1f5cbec7c8a9e1229d9a4f8edb3d5b82ef1ca21e19db814c56e38f7f1a953ae34b55cb4a59f50fa5d3152fa3e9c3d1546cf00a195eadc4afa
- SSDEEP 192:L90LBvwahz12VvvudTL/Y/RrHjHoe7ZiE2ke5qSlh+YqO3Q5tfmRW2:L9Vvvu4ERIWqO3l
- TLSH T163826D8FBBA240DEE43BC279CD63192BE06175161B311FEF47D1412A0FB6B943528E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://117.24.4.112:5555/bmHF
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
Targets
-
- Target cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5
- Size 18KB
- SHA256 cfc3cd6d62d0e8eb6950e8530b921c35ae74b1ec4bf71423195bc0e2829e91a5
- MD5 ad21bd60212218ff1d5ec24586ebd024
- SHA1 1d857682dd89f4187f4844970e261e5628802b1c
- SHA512 ba9f8a75185613e1f5cbec7c8a9e1229d9a4f8edb3d5b82ef1ca21e19db814c56e38f7f1a953ae34b55cb4a59f50fa5d3152fa3e9c3d1546cf00a195eadc4afa
- SSDEEP 192:L90LBvwahz12VvvudTL/Y/RrHjHoe7ZiE2ke5qSlh+YqO3Q5tfmRW2:L9Vvvu4ERIWqO3l
- TLSH T163826D8FBBA240DEE43BC279CD63192BE06175161B311FEF47D1412A0FB6B943528E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.