General
- Target 2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17
- Size 22KB
- Sample260808-me4qxavdmf
- SHA256 2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17
- MD5 92d75ff039bf96a69df4849068786f3f
- SHA1 12e0c5660400474c829730ebde668c81e1c138da
- SHA512 7d9941d1e16b19ac599bfa982169a85a82f2bc52157bb365aad51aae0a6ab40b87f682e91fb5992d4661ad81ec63ec8afaf3e2939f8435e4913c61dbbde1ec73
- SSDEEP 192:BXA9oA24zfPoBt7rBGkFwbMXjfVUTZfm2sdv5FjeBzmKHjHoe7ZiE2ke5TvWVOEo:BQ9Rm1Fwb5s2sdv56ERJO+Zhi3vq
- TLSH T124A26C4ABFAE14C8E467E27EC8E7152BE071BA102720AB9F4F5141250F767D4A83D687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://117.24.4.112:5555/bmHF
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
Targets
-
- Target 2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17
- Size 22KB
- SHA256 2915683ae8b0319e2bab8b20e3445de4ba92eabe6032f31c078b765fc1248f17
- MD5 92d75ff039bf96a69df4849068786f3f
- SHA1 12e0c5660400474c829730ebde668c81e1c138da
- SHA512 7d9941d1e16b19ac599bfa982169a85a82f2bc52157bb365aad51aae0a6ab40b87f682e91fb5992d4661ad81ec63ec8afaf3e2939f8435e4913c61dbbde1ec73
- SSDEEP 192:BXA9oA24zfPoBt7rBGkFwbMXjfVUTZfm2sdv5FjeBzmKHjHoe7ZiE2ke5TvWVOEo:BQ9Rm1Fwb5s2sdv56ERJO+Zhi3vq
- TLSH T124A26C4ABFAE14C8E467E27EC8E7152BE071BA102720AB9F4F5141250F767D4A83D687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.