General
- Target cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18
- Size 19KB
- Sample260819-ktsk3s1clh
- SHA256 cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18
- MD5 58e65233c4580cec0db0e0998b2d786d
- SHA1 dd66ed35872ffc12f5c03d87961dcbecc0d4a9ec
- SHA512 f4e22985df923b7305e0f954f90e5b4aec6e549f19419dd62631b7df2f9404c956439b0dd63d5c335b361f685ab5c1b6b2ba20284f02ebe807a22cc63801dda0
- SSDEEP 192:1V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/23bfyj4qWF8qa1Dojjgi:XqaCF31cix+Dc4zjUHFF46gi
- TLSH T1A792EA7FE71368E9C106D57845FF3732DCB13DB385A6A31E1734D2B42E105A46EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.88.222:9876/x3Co
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Targets
-
- Target cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18
- Size 19KB
- SHA256 cfe4af6f3efb9cbdd86b2bd57d430a04447192756c93cdc6287821b6c3ffba18
- MD5 58e65233c4580cec0db0e0998b2d786d
- SHA1 dd66ed35872ffc12f5c03d87961dcbecc0d4a9ec
- SHA512 f4e22985df923b7305e0f954f90e5b4aec6e549f19419dd62631b7df2f9404c956439b0dd63d5c335b361f685ab5c1b6b2ba20284f02ebe807a22cc63801dda0
- SSDEEP 192:1V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/23bfyj4qWF8qa1Dojjgi:XqaCF31cix+Dc4zjUHFF46gi
- TLSH T1A792EA7FE71368E9C106D57845FF3732DCB13DB385A6A31E1734D2B42E105A46EAAA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.