a10c8fe9ad79fe4ce1d16054a1a8ccba5f9cdc3370f723b3427e1c00f99c5885

User tags

Assigned on submission by the user, not by sandbox detections.

experiment:claude-opus-4.6-repeat-pilot profile:5bc3155e4da2b85364b79a5e plan:194890df7f0746b554490773 mode:original repeat:2 sha256:a10c8fe9ad79fe4ce1d16054a1a8ccba5f9cdc3370f723b3427e1c00f99c5885

Sharing

Copy URL Twitter E-mail

General

Target
2026-01-16_930974fb46050759fb7b99c27ac7c65c_cobalt-strike_conti.exe
Size 606KB
Sample260821-jpl23aap41
SHA256 a10c8fe9ad79fe4ce1d16054a1a8ccba5f9cdc3370f723b3427e1c00f99c5885
MD5 930974fb46050759fb7b99c27ac7c65c
SHA1 6b6521648951229b977387070983c56b8a75c5a9
SHA512 69d5ad2fabbb22be57342c3273b836692bfd0a77cecfc3b2e6b80cb82796d941e2a82437fb85bce88d00209af78019e32289e69d8979fa92032d209fc2814c45
SSDEEP 12288:UwkuosDcdI1aT9BNucLSA6TKgweg3FwaYkdBe65Xwzm:Tkf5CsxKJpwhd5V
TLSH
T169D41253E2E160D5E5B6ABF09E73093055327CD66830E71E7A5CF4282EB9C41DE7832A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  2026-01-16_930974fb46050759fb7b99c27ac7c65c_cobalt-strike_conti.exe
- Size 606KB
- SHA256 a10c8fe9ad79fe4ce1d16054a1a8ccba5f9cdc3370f723b3427e1c00f99c5885
- MD5 930974fb46050759fb7b99c27ac7c65c
- SHA1 6b6521648951229b977387070983c56b8a75c5a9
- SHA512 69d5ad2fabbb22be57342c3273b836692bfd0a77cecfc3b2e6b80cb82796d941e2a82437fb85bce88d00209af78019e32289e69d8979fa92032d209fc2814c45
- SSDEEP 12288:UwkuosDcdI1aT9BNucLSA6TKgweg3FwaYkdBe65Xwzm:Tkf5CsxKJpwhd5V
- TLSH
  T169D41253E2E160D5E5B6ABF09E73093055327CD66830E71E7A5CF4282EB9C41DE7832A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1