2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti
Size 508KB
Sample260822-mmkm1atbme
SHA256 b7d689d55362120fde52a1bed3edf149563d10dc2cb9ee2c5beefe6e2325841f
MD5 9044e0ac4375ee0ea3a4a41c0637ddb7
SHA1 c22e36c3ac65b4ee3181b9df0c695e04a0d3d878
SHA512 57ce4798309af62084eb3d1008d3927a02f8a0da78a0040b4321052f71aeda078a47042c3bd501a7964e4cae9b28b41dee212390561cb6d9470612c2b00dc901
SSDEEP 6144:bRKza7ALyvWwGniAP+S7BhRC0yPaSudJWinmHiaFFoQva8VTxreXU1hI3w:FK+q9i6h7XY03B25C0FnvXyXU
TLSH
T1A7B45B40EA05FDFADCCECEB444E2130A87D6A041971DE92F7A10FE7C046EA58DA36657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti

File Explorer

2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti

.exe 508KB

2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti

IMPHASH b730f6d2607eba41c483b4466d8b9142
SHA256 b7d689d55362120fde52a1bed3edf149563d10dc2cb9ee2c5beefe6e2325841f
MD5 9044e0ac4375ee0ea3a4a41c0637ddb7
SHA1 c22e36c3ac65b4ee3181b9df0c695e04a0d3d878
SHA512 57ce4798309af62084eb3d1008d3927a02f8a0da78a0040b4321052f71aeda078a47042c3bd501a7964e4cae9b28b41dee212390561cb6d9470612c2b00dc901
SSDEEP 6144:bRKza7ALyvWwGniAP+S7BhRC0yPaSudJWinmHiaFFoQva8VTxreXU1hI3w:FK+q9i6h7XY03B25C0FnvXyXU
TLSH
T1A7B45B40EA05FDFADCCECEB444E2130A87D6A041971DE92F7A10FE7C046EA58DA36657
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

479232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

600B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

228KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcdf17

Size

176KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-21_9044e0ac4375ee0ea3a4a41c0637ddb7_cobalt-strike_conti

kernel32

msvcrt

generic