2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti
Size 107KB
Sample260814-thfltaxarb
SHA256 4feb288dbf893cbcfdf4017c30c1a768120a4624e703fca45ba08ed0c115e48d
MD5 4430606e91b6f8fd9b8f37282cdf3b7c
SHA1 1a8a828a86d8b30eef30d9adec7623d68dd23dc6
SHA512 5fd107959138f8349013f43b4d8c4be72da3876852f2fb327747c7672695c9f308d524bbd1b8f1638ce0cfc45a540abc7d9da8f52dc5df7601dc46b22140a178
SSDEEP 3072:QOEAIX8ux0jmsrHqM/+joBuazrFDUY6+WSvm:u0jbbjuerFM
TLSH
T1F9B37C06FB8345FDC25AD27885925B72E632BC164124FBBF2658E2312F30E609F5FA15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti

File Explorer

2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti

.exe 107KB

2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti

IMPHASH 8c5e61dc6277b042cedb556410ffe60f
SHA256 4feb288dbf893cbcfdf4017c30c1a768120a4624e703fca45ba08ed0c115e48d
MD5 4430606e91b6f8fd9b8f37282cdf3b7c
SHA1 1a8a828a86d8b30eef30d9adec7623d68dd23dc6
SHA512 5fd107959138f8349013f43b4d8c4be72da3876852f2fb327747c7672695c9f308d524bbd1b8f1638ce0cfc45a540abc7d9da8f52dc5df7601dc46b22140a178
SSDEEP 3072:QOEAIX8ux0jmsrHqM/+joBuazrFDUY6+WSvm:u0jbbjuerFM
TLSH
T1F9B37C06FB8345FDC25AD27885925B72E632BC164124FBBF2658E2312F30E609F5FA15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

102210

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libbz2-1

BZ2_bzRead BZ2_bzReadClose BZ2_bzReadGetUnused BZ2_bzReadOpen BZ2_bzWrite BZ2_bzWriteClose64 BZ2_bzWriteOpen BZ2_bzlibVersion

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleW GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _filelengthi64 _fileno _fileno _fmode _initterm _isatty _lock _onexit _setmode _stat64 _time64 _unlock _write abort calloc exit fclose ferror fflush fgetc fgetpos fopen fprintf fputc fread free fsetpos fseek fwrite getenv isspace localeconv malloc memcpy memset perror remove rewind signal strcmp strerror strlen strncmp strncpy strstr ungetc vfprintf wcslen

Name

.text

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_4430606e91b6f8fd9b8f37282cdf3b7c_cobalt-strike_conti

libbz2-1

kernel32

msvcrt

generic