General
- Target 2026-08-09_01a9f8da831933ac7a63715e57a2ca0e_cobalt-strike_conti
- Size 94KB
- Sample260809-ndaxwawhmh
- SHA256 7ac5bf32a6b7ac17d0d4f907a2e405fc395ca59b50cbd5ffc2ca2462a0046643
- MD5 01a9f8da831933ac7a63715e57a2ca0e
- SHA1 2608e0ae2711ce168be7833fd07a7e977c8e124d
- SHA512 973a20ed505eb6c3608b620a2893af17b015ab4461bce17407713487c6bdeef8a064fdf05e3768274145812c7026ef81461a0df6d0a89d908c12e4e4ab3a02b5
- SSDEEP 1536:gPTr6nJ/wUVCmSK6ULj1WZREnVGJB0/ACuf4Nne8HmDIJE7kRXfEgjZnQW:gPTr2/jVNt6UErD25u0etDIOw9P
- TLSH T1AD931869B3A220FDC15AC27546F75BB2EA73F83151216FBE1398CA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_01a9f8da831933ac7a63715e57a2ca0e_cobalt-strike_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_01a9f8da831933ac7a63715e57a2ca0e_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_01a9f8da831933ac7a63715e57a2ca0e_cobalt-strike_conti
- Size 94KB
- SHA256 7ac5bf32a6b7ac17d0d4f907a2e405fc395ca59b50cbd5ffc2ca2462a0046643
- MD5 01a9f8da831933ac7a63715e57a2ca0e
- SHA1 2608e0ae2711ce168be7833fd07a7e977c8e124d
- SHA512 973a20ed505eb6c3608b620a2893af17b015ab4461bce17407713487c6bdeef8a064fdf05e3768274145812c7026ef81461a0df6d0a89d908c12e4e4ab3a02b5
- SSDEEP 1536:gPTr6nJ/wUVCmSK6ULj1WZREnVGJB0/ACuf4Nne8HmDIJE7kRXfEgjZnQW:gPTr2/jVNt6UErD25u0etDIOw9P
- TLSH T1AD931869B3A220FDC15AC27546F75BB2EA73F83151216FBE1398CA741F64C906F2D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.