0d468be9b73bc249abacb5fd580fd0ff41f53f71dc1e1d1c8af27df09473f700

Resubmissions

27/08/2026, 17:21

260827-vw8p7acj3s5

27/08/2026, 17:17

260827-vtthgsbr8y5

Sharing

Copy URL Twitter E-mail

General

Target
cobaltstrike4.0-Fixed.zip
Size 24.4MB
Sample260827-vtthgsbr8y
SHA256 0d468be9b73bc249abacb5fd580fd0ff41f53f71dc1e1d1c8af27df09473f700
MD5 fa3ca4026653f907436fd22d3cbb823c
SHA1 1c934c5f6609f343ea08082618d0eb00ee1f988f
SHA512 21babeb736d72f15c75357f752456742280aec5c294c04ded4542d77adb1ba7e40588eea02f802a8c053d7fea573f108102f30a2435a31a733d0eecd8fbd8ab5
SSDEEP 786432:vF6vznfO+fK6yjf/oRk/7DKkRaXjgNUEKHX:QvzWuHyjf/oRk/HKC8MK7X
TLSH
T10A4733CFB9264B6AC190A37E498721EB8C1886F175089A69FF452FA43F4E0D4CB77D11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  cobaltstrike4.0-Fixed.zip
- Size 24.4MB
- SHA256 0d468be9b73bc249abacb5fd580fd0ff41f53f71dc1e1d1c8af27df09473f700
- MD5 fa3ca4026653f907436fd22d3cbb823c
- SHA1 1c934c5f6609f343ea08082618d0eb00ee1f988f
- SHA512 21babeb736d72f15c75357f752456742280aec5c294c04ded4542d77adb1ba7e40588eea02f802a8c053d7fea573f108102f30a2435a31a733d0eecd8fbd8ab5
- SSDEEP 786432:vF6vznfO+fK6yjf/oRk/7DKkRaXjgNUEKHX:QvzWuHyjf/oRk/HKC8MK7X
- TLSH
  T10A4733CFB9264B6AC190A37E498721EB8C1886F175089A69FF452FA43F4E0D4CB77D11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  cobaltstrike4.0-Fixed/Hook.jar
- Size 5KB
- SHA256 2ddb3d9d5b3229fb6dde6f93cf460412cb9a3beeaa3648dfa40bf8156822b23e
- MD5 27167f9387cfe192236647698e313864
- SHA1 7059665f45f9671abdc7652aa06e0e7d8bfa80d6
- SHA512 b56802ad442c2f4f316561214885526ba7298d9cab009c2c926a2b108a1b8cd546f003fb6d723a30d453dd193d7464ddefa1ba55f96df6c60ad5fc82fe26810e
- SSDEEP 96:lJZn3Zpl7s0lZ3K6ud6QPqp98+SlsgN78kI6U9PeK6y7ep0iYopovustqKk9xbD:nB+0lcr0eJbgpeK5doCmscKkTv
- TLSH
  T18AC17C2C385FCB32D725DBB2F6CA720DC98556A4820DBB1DE6A4F68508F0A5E1743847
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  cobaltstrike4.0-Fixed/c2lint
- Size 144B
- SHA256 78d82b72aae1d847c64745a932bce927823337de58852833e8cafca168eb4366
- MD5 02cc6abccbf975c8da1fbb4d1c4c2f54
- SHA1 1cc94ee0279751fbfd6e598e9a084ce6ee957894
- SHA512 14035c7a5fac9bdda4fb1a07e148a03af65fa3136e9a48ebf15b3c08578f8de28bfff39192e01256caa242d356cf931415298bec961c12272fcbf80dad907cc9
- TLSH
  T18EC02B6BE6EDF18109381600B4F412F804013315E78915748750044D032BF844005757
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  cobaltstrike4.0-Fixed/cobaltstrike.bat
- Size 132B
- SHA256 3b924e530e5df3a971694bef7eaca49b3cd887e8b71d4d676cf4a7a11975e435
- MD5 ccb64a7f8d5fd2a27e0961796f870319
- SHA1 51a065348596e14df6bee0e5143222caaa9c71d8
- SHA512 7624bed21a179972b769e32f1077f300b4fe141f924c2ef67c6d60118b44f0182d858c5e47b6fbef6317e9a01ffc3f82ea943978be32fffff3a37c21fcc4e3ac
- TLSH
  T1C3C02B54F3E4DC9800C02A07F07C00E483160F0D924873314244D8180703B0C08053E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  cobaltstrike4.0-Fixed/cobaltstrike.jar
- Size 25.6MB
- SHA256 eef76cda6ea8c0b46613cf2f20f48d2c2fa067b9f2291599fb4ad0cf96961f46
- MD5 cd89fa488ffa5c795876d04f95b3733c
- SHA1 7ec2af582e8db21575ce4335c322193238d490f2
- SHA512 5307c378e696983e1fd7af993d52aabd739bc64bf8f942529d503f002e9011cd87c6cadbf3e71d113342fcd27ea9bffef37993a6cec0964b6b1efebc121b5f88
- SSDEEP 786432:vmHaTa/FJZDsnT4FbMg6vzMlqAzqDd4JW8MsN:F8XZDsTobM3z0qkKWoSN
- TLSH
  T14F470132E5C86432E677423399A25513BD3FC1CCE08B61AA35BC16E7B8B2C4A8F53755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  cobaltstrike4.0-Fixed/cobaltstrike.sh
- Size 132B
- SHA256 3b924e530e5df3a971694bef7eaca49b3cd887e8b71d4d676cf4a7a11975e435
- MD5 ccb64a7f8d5fd2a27e0961796f870319
- SHA1 51a065348596e14df6bee0e5143222caaa9c71d8
- SHA512 7624bed21a179972b769e32f1077f300b4fe141f924c2ef67c6d60118b44f0182d858c5e47b6fbef6317e9a01ffc3f82ea943978be32fffff3a37c21fcc4e3ac
- TLSH
  T1C3C02B54F3E4DC9800C02A07F07C00E483160F0D924873314244D8180703B0C08053E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  cobaltstrike4.0-Fixed/peclone
- Size 141B
- SHA256 a29b4969c1f6c7759d6f94780145e126a8d67812fa388239a595472f1a9f3b13
- MD5 f04e57b5e17b53ffbf12a817da5c9dca
- SHA1 1ef54b3a0587fa0842600aee5ae00815191a1641
- SHA512 9cffb267a89b6ba1de45b7807f0a88df83b60269783856601dadf8a73bac9b27f7efc807583061ad5b9d9345be5ddbc065c969e4402fd64e602924703f69be10
- TLSH
  T1E0C02B6BA92DF1400B280604A87418F8001E3315830D07304B60188D1317F05800B357
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  cobaltstrike4.0-Fixed/teamserver.sh
- Size 1KB
- SHA256 3b36fbd845d0d0ffba17055942e96d60c7f0426209aff6501d559b61edc4a629
- MD5 fab5ef3691bbdb35a3d855282e689575
- SHA1 9430bb5d376a8e99fefa3c1bb3989e42f3b485ec
- SHA512 777a5ad6c29bef9c4f7b8683d076a95503a66cb21982d552ade283d6d28e5515dab5e67f5f16233c217a72bca70be55ccb3a7369b2e333322d7016d0be55b98c
- TLSH
  T1E64166A7F56DCF341C6801E4E10E71D2AB5C02AAC2797D3425745E2D3903CAD52AEAE6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  cobaltstrike4.0-Fixed/teamserver_win.bat
- Size 1KB
- SHA256 b42c597a469a9e2021e0e051481f4ef483251ec26d917e73ec14ab2edaec6247
- MD5 3815e8ad40ea60779771f0543c1465fb
- SHA1 9af3f7eab8df9ca81f6fc1cc38ecd6ef9c28a44c
- SHA512 0cc9378f00db17ca42eeace54e36379fe3b3a848be9231d90319ecbd80de3795bf34dbf7311df69e438653c94b408588bb27a1b385983f6a72a8728ff49be180
- TLSH
  T183412025B849D9320D78CB6917591052FB6C928B12013E5D3BFEC2696F7298C03FE2DB
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Drops file in System32 directory
behavioral23 behavioral24
- Target
  cobaltstrike4.0-Fixed/third-party/winvnc.x64.dll
- Size 366KB
- SHA256 0a49b4408068c38fb4f1a540871d10fb1e9739e73daf1637c67e34f59e594ba1
- MD5 e51265f5926c76fb23cd271a602201d2
- SHA1 75f3bcce5ca0f7a9c68d07c8944492b4f6b99d31
- SHA512 6a1783523b907cc988443884455dbdb12410d6fa57ed0510d35634ae429b3c0fecec57544c8ea9ed0f35cf2eea88fe7fddb7979979e13f7f1c56776a3b771ebe
- SSDEEP 6144:vUzzdnu/jPcp9tayWT8W/WtW577KW+f4qFjT2UnrTAhwwk8qc2JZPHan85xMN:vOzd0Pcp9tawwN7ww6TTnJf9aH
- TLSH
  T185845C89FBA404E9D5B7817889B3460AD3723C4907655BCF67A4836A7F33FD11A3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  cobaltstrike4.0-Fixed/third-party/winvnc.x86.dll
- Size 281KB
- SHA256 79264258924acbe95fbe6f4f22a519c8263db59ff618146b3f20642f44004540
- MD5 0b29b836626c477639e23f59b18a4945
- SHA1 c14b9bfc13004ebe46ae989506456e5caacf1395
- SHA512 9374055f53040d8b3b3c0b516e6cf3a35029ccc95989e36ac9b72d8af0f9ce6ab736e09677fa4cc5002c94ad2a7186764bec207cac6ec357ab88a5909d46838a
- SSDEEP 6144:N4mXEU0AU8qYWi0BtNwG2xwC9VMEHka91rVUq8:xEUhWiqqGhs1O
- TLSH
  T17354A020F540C032D5EA027689BE6B7959BD7A31076C96C3B7C41AE81E716E36B3538F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28