General
- Target 2026-08-09_54a6dabcc5d1a403e90174efb921fed6_cobalt-strike_conti
- Size 94KB
- Sample260809-l8kdpadm4s
- SHA256 12775481ad6392a1f7b82ee93e69bf11ef25e27d2f9e4328ee9a14d3545b1881
- MD5 54a6dabcc5d1a403e90174efb921fed6
- SHA1 249b5afafa8235cbc5e20bf274079888c8336da0
- SHA512 09db55d2edbd01997acb93d79f260c0a8bcf9bb52c78580f25fedc107cdb72f4dbf239b88de89ac01a20ffcc17bbf1822d7ddbbc6a49bfdce73eacd36607c178
- SSDEEP 1536:qo7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:qEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T141931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_54a6dabcc5d1a403e90174efb921fed6_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_54a6dabcc5d1a403e90174efb921fed6_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_54a6dabcc5d1a403e90174efb921fed6_cobalt-strike_conti
- Size 94KB
- SHA256 12775481ad6392a1f7b82ee93e69bf11ef25e27d2f9e4328ee9a14d3545b1881
- MD5 54a6dabcc5d1a403e90174efb921fed6
- SHA1 249b5afafa8235cbc5e20bf274079888c8336da0
- SHA512 09db55d2edbd01997acb93d79f260c0a8bcf9bb52c78580f25fedc107cdb72f4dbf239b88de89ac01a20ffcc17bbf1822d7ddbbc6a49bfdce73eacd36607c178
- SSDEEP 1536:qo7JwmSaH56460gd/IZRJrKqk5b/ACu34NQHdH8Kkvn/rRzX7PlBQW:qEwTaZn60/rY5ucWyKkvnzpJ
- TLSH T141931929B3A220FDC15AC27546F75BB2EA73F83151216FBE1398DA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.