General
- Target 4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1
- Size 114KB
- Sample260820-q7f24adf95
- SHA256 4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1
- MD5 88c42e86e300424d776154508c596ce7
- SHA1 ece0c47fdfe86fea6d74dc337c869b169f02345e
- SHA512 9e241cce882a29ead3b39e76e3412e1e1f10d47325623550e4ee328ff1925d585c5052d0052bad71f80a2799cd88843df335b4a168186359637d207e4a7af1a7
- SSDEEP 3072:SqqjgnIunwGDGWTClAmd5A1MN/fm4tto43p:SpgnlwGDe3d5Yqfmad3p
- TLSH T1EDB35C5B77E530F8D1768239C496164AE776B8360760AFEF17A4065A0F232E08D3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://82.157.176.57:8080/res/js/jquery-3.6.2.slim.min.js
Attributes
-
user_agent
Accept: */* Content-Language: de-DE, en-CA User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0)
Targets
-
- Target 4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1
- Size 114KB
- SHA256 4ad40c90cdb03bb3b4599982fa7393f69c19b85329695ee0c5299fdeb0bcb4d1
- MD5 88c42e86e300424d776154508c596ce7
- SHA1 ece0c47fdfe86fea6d74dc337c869b169f02345e
- SHA512 9e241cce882a29ead3b39e76e3412e1e1f10d47325623550e4ee328ff1925d585c5052d0052bad71f80a2799cd88843df335b4a168186359637d207e4a7af1a7
- SSDEEP 3072:SqqjgnIunwGDGWTClAmd5A1MN/fm4tto43p:SpgnlwGDe3d5Yqfmad3p
- TLSH T1EDB35C5B77E530F8D1768239C496164AE776B8360760AFEF17A4065A0F232E08D3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.