General
- Target 2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti
- Size 93KB
- Sample260809-lzgansvgkg
- SHA256 7f75401f81b353a267cf8e7496e8c8750c7b074ca54e5360c032f9ae8e763e09
- MD5 9d47bfcc5c874c49d3acf03d2d217a0c
- SHA1 2fe30570460e812bd8ab70ebe93136d54775c7bf
- SHA512 f3db66e389d095c9bcc6761924526fb61ee8387227b9952a3632f269951407cca3fb4ce222d5ad9877551e49d6fbb5fff40f74abd74d6bc3af40e62dff674123
- SSDEEP 1536:TmjtbJMSPta1DWZ6DwgBakZRpNt24U/ACum4NHoTHmHi1RFessZnfW:Tm59MetO66DzBrpO5udIiHi1HeC
- TLSH T1D4931829B3A220FDC15AC27546F75BB2DA73F83152206FAE1398CA741F64C907F2D624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti
- Size 93KB
- SHA256 7f75401f81b353a267cf8e7496e8c8750c7b074ca54e5360c032f9ae8e763e09
- MD5 9d47bfcc5c874c49d3acf03d2d217a0c
- SHA1 2fe30570460e812bd8ab70ebe93136d54775c7bf
- SHA512 f3db66e389d095c9bcc6761924526fb61ee8387227b9952a3632f269951407cca3fb4ce222d5ad9877551e49d6fbb5fff40f74abd74d6bc3af40e62dff674123
- SSDEEP 1536:TmjtbJMSPta1DWZ6DwgBakZRpNt24U/ACum4NHoTHmHi1RFessZnfW:Tm59MetO66DzBrpO5udIiHi1HeC
- TLSH T1D4931829B3A220FDC15AC27546F75BB2DA73F83152206FAE1398CA741F64C907F2D624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.