General
- Target 4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75
- Size 5KB
- Sample260822-p3neyavbjh
- SHA256 4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75
- MD5 9a955e9af92453763c2bbeb814c8c0ca
- SHA1 594a121d1c1b69bb577b0972552696054c709cce
- SHA512 3153b601a235cd14b02d58c7ba16af1f75b479e5c9eac2a058fc60cc37331e4ec0b7af6222a2bc68c3d961c72f89619bc7a031f9b494262b053809a2780a925d
- SSDEEP 96:BTLotMQ2g8qlxK4fckVPxIiTUD5U8LbVLWbmhKrUvqyfB1ttEE:ZEMQr8qrK4fckVPxIiTMU8nVL4mhRVBP
- TLSH T176C10F099A054479E48D23FD4A312D411BB1339D03ECE5FFA3E2696C9B53BDD203A6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75.dll
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.73.129:80/lDaL
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; Avant Browser)
Targets
-
- Target 4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75
- Size 5KB
- SHA256 4891747311834cf59e7b94b4738f9dfef990cd972469cd163b4385079290cb75
- MD5 9a955e9af92453763c2bbeb814c8c0ca
- SHA1 594a121d1c1b69bb577b0972552696054c709cce
- SHA512 3153b601a235cd14b02d58c7ba16af1f75b479e5c9eac2a058fc60cc37331e4ec0b7af6222a2bc68c3d961c72f89619bc7a031f9b494262b053809a2780a925d
- SSDEEP 96:BTLotMQ2g8qlxK4fckVPxIiTUD5U8LbVLWbmhKrUvqyfB1ttEE:ZEMQr8qrK4fckVPxIiTMU8nVL4mhRVBP
- TLSH T176C10F099A054479E48D23FD4A312D411BB1339D03ECE5FFA3E2696C9B53BDD203A6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.