General
- Target 9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f
- Size 19KB
- Sample260824-v21xja1eke
- SHA256 9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f
- MD5 a97b32b730911aff608cc1e0a78b13a0
- SHA1 a401ec1bf36a28175e51911df678de93fe2b16dd
- SHA512 5d7380499a2afeef6edaa6195a2aac55accf0e206b3fdb0aff116a42d218708c0259ccc8d5e98154847dfd92f8b7baba14d3545e4e205cfaee79983573521daf
- SSDEEP 192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2itrQnWF8qa1Dojjgi:3qaCF31cix+Dc4zjZvFF46gi
- TLSH T1E492EA3FE71368E9C106D57845FF3733DCB239B385A6A71E2724D2B42E105A46EAE610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://117.72.119.47:1888/8duL
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; InfoPath.2)
Targets
-
- Target 9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f
- Size 19KB
- SHA256 9256c53da38da771b29e58d965b1654db8f6877b2a5398215450825f50e5665f
- MD5 a97b32b730911aff608cc1e0a78b13a0
- SHA1 a401ec1bf36a28175e51911df678de93fe2b16dd
- SHA512 5d7380499a2afeef6edaa6195a2aac55accf0e206b3fdb0aff116a42d218708c0259ccc8d5e98154847dfd92f8b7baba14d3545e4e205cfaee79983573521daf
- SSDEEP 192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2itrQnWF8qa1Dojjgi:3qaCF31cix+Dc4zjZvFF46gi
- TLSH T1E492EA3FE71368E9C106D57845FF3733DCB239B385A6A71E2724D2B42E105A46EAE610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.