General
- Target 50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb
- Size 19KB
- Sample260824-j83txsdq8s
- SHA256 50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb
- MD5 f733138bdd4d3c3cc3b81bac4f969bc8
- SHA1 48effa0b044a63fea48a7cdf18778b46ec4af4d0
- SHA512 0883507b33bb91991a64e4350f813cf8b3998a5b06c12dc56ecc8d57cdd61acf1a796ef95dcb46ac4d83f53715d1db1e8ce15ff7130ecf1e469592e8ecaec84f
- SSDEEP 192:dPV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LKG9WF8qa1Dojjgi:dJqaCF31cix+Dc4zjdNFF46gi
- TLSH T1F892FB3FE70368E9C106D57846FF3732DCB17DB385A6971E2724D2B42E106A46EAA610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.0.107:81/MsTI
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727)
Targets
-
- Target 50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb
- Size 19KB
- SHA256 50bb2f6a632ca69a5654776d0c17fa9ec3b4d2cb7804f364db0e3cd09206c9cb
- MD5 f733138bdd4d3c3cc3b81bac4f969bc8
- SHA1 48effa0b044a63fea48a7cdf18778b46ec4af4d0
- SHA512 0883507b33bb91991a64e4350f813cf8b3998a5b06c12dc56ecc8d57cdd61acf1a796ef95dcb46ac4d83f53715d1db1e8ce15ff7130ecf1e469592e8ecaec84f
- SSDEEP 192:dPV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LKG9WF8qa1Dojjgi:dJqaCF31cix+Dc4zjdNFF46gi
- TLSH T1F892FB3FE70368E9C106D57846FF3732DCB17DB385A6971E2724D2B42E106A46EAA610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.