General
- Target 2026-08-09_f738de745c8bf46bcb0ad0669d7cb953_cobalt-strike_conti
- Size 90KB
- Sample260809-lnqpzaytew
- SHA256 4e4fa51c2cf0e2d3434671adec49a662ed82e4a83339c980b5e828b480715b5f
- MD5 f738de745c8bf46bcb0ad0669d7cb953
- SHA1 f1a69fdbaa65b203c82eec5e83e17265e04c82c3
- SHA512 aaacd28f6bf7ea6b6683149095d3c1eacbc7de41035e8f14a37223bb8dd7a789d5274510e4412e80543609de3fcbd4aa32d3bf88b67ecb3b9ce2a8f9c465bb40
- SSDEEP 1536:5eXkJ3uatmvIUxj6VXZFSgZRL/Cyd/AieW4NDY2HObVyZbWnwW:kg3uMmvlF6VpzrtZeNc/bVwbe
- TLSH T151931919B3A220FDC15AD27956E757B2EA73F8311121AFBF0398DA351F55C902F2E620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f738de745c8bf46bcb0ad0669d7cb953_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f738de745c8bf46bcb0ad0669d7cb953_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f738de745c8bf46bcb0ad0669d7cb953_cobalt-strike_conti
- Size 90KB
- SHA256 4e4fa51c2cf0e2d3434671adec49a662ed82e4a83339c980b5e828b480715b5f
- MD5 f738de745c8bf46bcb0ad0669d7cb953
- SHA1 f1a69fdbaa65b203c82eec5e83e17265e04c82c3
- SHA512 aaacd28f6bf7ea6b6683149095d3c1eacbc7de41035e8f14a37223bb8dd7a789d5274510e4412e80543609de3fcbd4aa32d3bf88b67ecb3b9ce2a8f9c465bb40
- SSDEEP 1536:5eXkJ3uatmvIUxj6VXZFSgZRL/Cyd/AieW4NDY2HObVyZbWnwW:kg3uMmvlF6VpzrtZeNc/bVwbe
- TLSH T151931919B3A220FDC15AD27956E757B2EA73F8311121AFBF0398DA351F55C902F2E620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.