General
- Target d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e
- Size 19KB
- Sample260823-cgn35aha68
- SHA256 d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e
- MD5 da1d229813fe2fe39ef3f4bbaabbf735
- SHA1 f4d694848917f55583473a36d83ba9fdebce7f0e
- SHA512 31a5ac5665c2759adc4c13c1397380419ef648ff1b70a50fc92e6e61f42247321bc42ae0c259cc1f8f03b5dcf72479082d2e1a87db3bab087fb2bb5bb10e79c0
- SSDEEP 192:dPV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/22lgYAYu8WF8qa1Dojjgi:DqaCF31cix+Dc4zjhHWFF46gi
- TLSH T1E392DA3FE71358E9C106D57845FF3732DCB23DB385A6A31E2724D2B42E106A46E6EA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.1.158:80/T7lf
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Targets
-
- Target d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e
- Size 19KB
- SHA256 d444996e56ab0599a595b2a6491ab42f234f50d14af43d2c1d3e59ba0040e25e
- MD5 da1d229813fe2fe39ef3f4bbaabbf735
- SHA1 f4d694848917f55583473a36d83ba9fdebce7f0e
- SHA512 31a5ac5665c2759adc4c13c1397380419ef648ff1b70a50fc92e6e61f42247321bc42ae0c259cc1f8f03b5dcf72479082d2e1a87db3bab087fb2bb5bb10e79c0
- SSDEEP 192:dPV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/22lgYAYu8WF8qa1Dojjgi:DqaCF31cix+Dc4zjhHWFF46gi
- TLSH T1E392DA3FE71358E9C106D57845FF3732DCB23DB385A6A31E2724D2B42E106A46E6EA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.