Analysis
- max time kernel
150s - max time network
137s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 09:58
General
- Target 2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti.exe
- Size 93KB
- Sample260809-lzgansvgkg
- SHA256 7f75401f81b353a267cf8e7496e8c8750c7b074ca54e5360c032f9ae8e763e09
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 2 IoCs
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_9d47bfcc5c874c49d3acf03d2d217a0c_cobalt-strike_conti.exe"1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3564-0-0x00007FFEDC9BF000-0x00007FFEDC9C0000-memory.dmp
memory/3564-1-0x00007FFEDC860000-0x00007FFEDCAC3000-memory.dmp
memory/3564-2-0x00007FF6E5A30000-0x00007FF6E5A4F000-memory.dmp
memory/3564-3-0x00007FFEDC860000-0x00007FFEDCAC3000-memory.dmp
memory/3564-8-0x00007FF6E5A30000-0x00007FF6E5A4F000-memory.dmp