General
- Target 2026-08-15_18cd31a518188aca9c89203bf2f7914b_conti
- Size 41KB
- Sample260815-b9akrsdk4z
- SHA256 cfd5476ee397070fa2933067a3435527dedc669dbe1c424ad593dc74ea213b13
- MD5 18cd31a518188aca9c89203bf2f7914b
- SHA1 64c217569dda60e11bb7e563d9d8bdfffc0adefd
- SHA512 dcea1d6b5475fd6b2d3b305e4af4e2076a88f1e95909d65c1b31268bdb6d85cd0474ff3eedba9fe94923d1a5e6913ffd03cc80c7a95ef849683484f47597f6d8
- SSDEEP 384:obozmcX3sOZPOyveUQwxFkdno+RZwm6eS2KuiGa+yu1A6CW:ob0X3sOJ6UQA6dbGW
- TLSH T129131D17E136ECD9FA1CB8F0E4D69EF0AD2FAC210326793532B1F9791A334429615267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_18cd31a518188aca9c89203bf2f7914b_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_18cd31a518188aca9c89203bf2f7914b_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://175.178.12.127:443/Kk28r6c2
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Targets
-
- Target 2026-08-15_18cd31a518188aca9c89203bf2f7914b_conti
- Size 41KB
- SHA256 cfd5476ee397070fa2933067a3435527dedc669dbe1c424ad593dc74ea213b13
- MD5 18cd31a518188aca9c89203bf2f7914b
- SHA1 64c217569dda60e11bb7e563d9d8bdfffc0adefd
- SHA512 dcea1d6b5475fd6b2d3b305e4af4e2076a88f1e95909d65c1b31268bdb6d85cd0474ff3eedba9fe94923d1a5e6913ffd03cc80c7a95ef849683484f47597f6d8
- SSDEEP 384:obozmcX3sOZPOyveUQwxFkdno+RZwm6eS2KuiGa+yu1A6CW:ob0X3sOJ6UQA6dbGW
- TLSH T129131D17E136ECD9FA1CB8F0E4D69EF0AD2FAC210326793532B1F9791A334429615267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.