General
- Target 2026-08-15_222403adac7171dadc31b94873dd8045_conti
- Size 20KB
- Sample260815-xzrbessdpf
- SHA256 8aa781334448756b7caf45bfb87866fc27dac75f5a30d63b01ba6c89b12b5aad
- MD5 222403adac7171dadc31b94873dd8045
- SHA1 ac01f5ccc913cde24214aca14bb00f905f1712d8
- SHA512 3a64faaae7fe6910c08bef1cd664a71c91a2fccea83a6436fef44ea6a4900b94cbab77a656f3575342daa18cf42209c0026a97a599d6ad7ee79fedb619aef59f
- SSDEEP 192:tPtlKQIVQNd8UFTsJvNnrWyO8VOsHuEqCK5Di1Eu0IKr/z0kR42Q90Csz:tacB8E2OsP5E5r/z0kunyCW
- TLSH T16792C65AF12350ECDA66D1B4D4EB4F71FA61BC2205309F3B6694DA791F31943CA2EA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_222403adac7171dadc31b94873dd8045_conti.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_222403adac7171dadc31b94873dd8045_conti.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://175.178.12.127:443/Zf96w7G9
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Targets
-
- Target 2026-08-15_222403adac7171dadc31b94873dd8045_conti
- Size 20KB
- SHA256 8aa781334448756b7caf45bfb87866fc27dac75f5a30d63b01ba6c89b12b5aad
- MD5 222403adac7171dadc31b94873dd8045
- SHA1 ac01f5ccc913cde24214aca14bb00f905f1712d8
- SHA512 3a64faaae7fe6910c08bef1cd664a71c91a2fccea83a6436fef44ea6a4900b94cbab77a656f3575342daa18cf42209c0026a97a599d6ad7ee79fedb619aef59f
- SSDEEP 192:tPtlKQIVQNd8UFTsJvNnrWyO8VOsHuEqCK5Di1Eu0IKr/z0kR42Q90Csz:tacB8E2OsP5E5r/z0kunyCW
- TLSH T16792C65AF12350ECDA66D1B4D4EB4F71FA61BC2205309F3B6694DA791F31943CA2EA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.