General
- Target f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba
- Size 24KB
- Sample260811-2vmvnaem7z
- SHA256 f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba
- MD5 9323d8722612cd5c4db9e18195232e33
- SHA1 a8e0eed36c914fd79f197eab95e1c15dbc92eb3c
- SHA512 ce4d4542a2f1ad228d53d956dd5bab0b970d330887320da43490c50d663f04a0edd0764c77a158ac7cb6ec7081ff3aa0732d21483758165643a1c5b9d7ffb08b
- SSDEEP 384:Xy9UNirVuRMS1jXhc9vkGW3nnsDyfUhdrAIUIYzpenJWzRWXa:sUNirVuRMEhcVkGWcOfZIUIEp86R
- TLSH T101B22A0F734364D8D51BD27896FBC736AAF2BC12182F5B2E0A60D3352E30DA45A39657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://10.211.55.4:8089/KPnT
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Targets
-
- Target f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba
- Size 24KB
- SHA256 f324323dcfb2de848e847fd9f3ac64b90bcef361a56ce273c86ca6fea313a5ba
- MD5 9323d8722612cd5c4db9e18195232e33
- SHA1 a8e0eed36c914fd79f197eab95e1c15dbc92eb3c
- SHA512 ce4d4542a2f1ad228d53d956dd5bab0b970d330887320da43490c50d663f04a0edd0764c77a158ac7cb6ec7081ff3aa0732d21483758165643a1c5b9d7ffb08b
- SSDEEP 384:Xy9UNirVuRMS1jXhc9vkGW3nnsDyfUhdrAIUIYzpenJWzRWXa:sUNirVuRMEhcVkGWcOfZIUIEp86R
- TLSH T101B22A0F734364D8D51BD27896FBC736AAF2BC12182F5B2E0A60D3352E30DA45A39657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.