General
- Target c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b
- Size 19KB
- Sample260831-mep8hszdpd
- SHA256 c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b
- MD5 6b255c4dda7e3a819ae4779263a51647
- SHA1 8d8dcdc32f90f43adbf067c6fed710447dd86c05
- SHA512 80732c63705d02083b528942534f2f81a2e072f797cab84b1d9300e1d9b44bd314c93beabd377c492b417bcd83c14c7d3e528fad0dd73341cb5a846965f72d1a
- SSDEEP 192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ke9WF8qa1Dojjgi:rqaCF31cix+Dc4zjDdFF46gi
- TLSH T14192DA3FE31358E9C106D5B845FB3732DCB13CB385E6932E1724D2B42E106A42EAE610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.153.128:80/4juJ
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)
Targets
-
- Target c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b
- Size 19KB
- SHA256 c825b0cde6bf591f6f75d075a4b9c8d969b39eee0d766e5578d339f99ea81b5b
- MD5 6b255c4dda7e3a819ae4779263a51647
- SHA1 8d8dcdc32f90f43adbf067c6fed710447dd86c05
- SHA512 80732c63705d02083b528942534f2f81a2e072f797cab84b1d9300e1d9b44bd314c93beabd377c492b417bcd83c14c7d3e528fad0dd73341cb5a846965f72d1a
- SSDEEP 192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ke9WF8qa1Dojjgi:rqaCF31cix+Dc4zjDdFF46gi
- TLSH T14192DA3FE31358E9C106D5B845FB3732DCB13CB385E6932E1724D2B42E106A42EAE610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.