Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/08/2026, 10:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
artifact2_x64.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
artifact2_x64.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target artifact2_x64.exe
- Size 40KB
- Sample260821-mesnmsstf1
- SHA256 24e0082d1a5c13b2854d7cdd3ab724cf8f8c1af83b262aeb0a1540268efe7bb4
- MD5 8073551556ffa7a02186fa8b7ff386a8
- SHA1 96cecef037e2f3f920716192f7bbc8f342ca62e5
- SHA512 dc4cac99f3eea21010202eeae6e0bbf3c924507c7c7975e267d8e2bcfd537577d21771be1d1d0249380d24c119995990342a70c8297d006d3fe721c190d525cc
- SSDEEP 768:rHOwsh/RE8KX002s+j8Rx0bUNAOXNUVhuvL1b2qZ6PXTzI:otBsis8oNpN+cvLRwPjz
- TLSH T192133B6EA34364ECD20BD27846EB6733BC31FC634160DE7F16A4E6701E11E516B2AA34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://103.54.153.49:80/XQCq
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.