General
- Target 2026-08-15_1c0dce2d84c87fa3a1fe0be4b18618df_conti
- Size 41KB
- Sample260815-b8dk2adk3t
- SHA256 50c90592f5dcaa4f47c60866f542204b51bd6f67e1755b1ab2d9a9172ef5090d
- MD5 1c0dce2d84c87fa3a1fe0be4b18618df
- SHA1 2cd6042cdafecd4cfab589fb75ff1c49ffd59ac1
- SHA512 951a89b0804163c15bf4978c4c130037e91a5d10ba04378ba5da45238d4e790b2b27c69ea9628f3530c111214d91f1c4f3b14b89e6703bd698e015d2207fe6f5
- SSDEEP 384:g6jb7B3dD9H4Z3MOEFatogo4Fkdno+RZwm6eS2KuiGa+yu1A6CW:gqb/pH4ZcOEFatNL6dbGW
- TLSH T1F6132F07E132ECD9F96CB8F0E5D69EB0AD2FBC21022636353275F6791E334429614267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1c0dce2d84c87fa3a1fe0be4b18618df_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1c0dce2d84c87fa3a1fe0be4b18618df_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://175.178.12.127:443/Kk28r6c2
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Targets
-
- Target 2026-08-15_1c0dce2d84c87fa3a1fe0be4b18618df_conti
- Size 41KB
- SHA256 50c90592f5dcaa4f47c60866f542204b51bd6f67e1755b1ab2d9a9172ef5090d
- MD5 1c0dce2d84c87fa3a1fe0be4b18618df
- SHA1 2cd6042cdafecd4cfab589fb75ff1c49ffd59ac1
- SHA512 951a89b0804163c15bf4978c4c130037e91a5d10ba04378ba5da45238d4e790b2b27c69ea9628f3530c111214d91f1c4f3b14b89e6703bd698e015d2207fe6f5
- SSDEEP 384:g6jb7B3dD9H4Z3MOEFatogo4Fkdno+RZwm6eS2KuiGa+yu1A6CW:gqb/pH4ZcOEFatNL6dbGW
- TLSH T1F6132F07E132ECD9F96CB8F0E5D69EB0AD2FBC21022636353275F6791E334429614267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.