General
- Target 2026-08-09_0e25661ee0d4b81f3da3c0ff03fc61ce_cobalt-strike_conti
- Size 90KB
- Sample260809-ncnscawhka
- SHA256 c7a516696ce52cd9046bd793ba43ee38e3f5037892a9230a48ad06c118672d2e
- MD5 0e25661ee0d4b81f3da3c0ff03fc61ce
- SHA1 8955ae380870f6b1b75eb2ec8d4c243c8bcd6670
- SHA512 4958aaca27f4824d58113de27b6b40fe32136297b9a7190099a6b78a09b5c37442264e171445a579d102c65c852cfbcbade34a7f3d0cba5bb561db766ca27fae
- SSDEEP 1536:OOf3ZJXosgSNFC6D7QnAsiZRrFHJd/AieW4NmzyhHQErIuRTslB+ieW:OOvX3gGU6DMar5ZeN81E07lke
- TLSH T15C930819B3A324FDC15AC27556E797B2EA73F8311121AFBE0398DA351F54C906F2E620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_0e25661ee0d4b81f3da3c0ff03fc61ce_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0e25661ee0d4b81f3da3c0ff03fc61ce_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_0e25661ee0d4b81f3da3c0ff03fc61ce_cobalt-strike_conti
- Size 90KB
- SHA256 c7a516696ce52cd9046bd793ba43ee38e3f5037892a9230a48ad06c118672d2e
- MD5 0e25661ee0d4b81f3da3c0ff03fc61ce
- SHA1 8955ae380870f6b1b75eb2ec8d4c243c8bcd6670
- SHA512 4958aaca27f4824d58113de27b6b40fe32136297b9a7190099a6b78a09b5c37442264e171445a579d102c65c852cfbcbade34a7f3d0cba5bb561db766ca27fae
- SSDEEP 1536:OOf3ZJXosgSNFC6D7QnAsiZRrFHJd/AieW4NmzyhHQErIuRTslB+ieW:OOvX3gGU6DMar5ZeN81E07lke
- TLSH T15C930819B3A324FDC15AC27556E797B2EA73F8311121AFBE0398DA351F54C906F2E620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.