Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 10:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe
- Size 22KB
- Sample260808-l4rl7sdm2w
- SHA256 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1
- MD5 71a866e52400a60cd6bc2a0247c2116a
- SHA1 2ef33b9c7ea4b2bf4bc09f5bc4928d183a3e622f
- SHA512 466f158429c4a6c164bfc5cf8ef3451f07c03513b17625c1651314b800c7d80c7c61d2a170c3a4616d39127787448ffa5fd53ae0c12fe672ea15604e2c3cadc2
- SSDEEP 192:GYiPqLBEcOAIB9RJ7mChEBOhObIQ3oIvajrjmGkIDZDbgvWVW7HjHoe7Oke5Inmi:LiPaq9G/3hvwb8OkhORcq12i3s
- TLSH T1D3A25C5AFBAE51C9F876E23EC4E7553FE071B5105726AB8F4B5101120FA3BD0642CA87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://117.24.4.112:5555/bmHF
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
- Suspicious behavior: EnumeratesProcesses 46 IoCs
pid Process 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe 4124 8d5089ae66a3c56cf9379aafe9f23c53d1babce72f752a8990821187f7779bb1.exe