General
- Target 85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d
- Size 19KB
- Sample260831-mgdbqssvcy
- SHA256 85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d
- MD5 27a4065a1660feb87c5dcfd48c72486b
- SHA1 6893edda798dee4022f0562e8f360cc2b968ef56
- SHA512 7a01391547b68d891bc15f79970833d3b113cf4c3d31af76b637ad49039749c9fb86bdc553b1884c365320af737f3c576eeb01fd3f65725c5a182a159622be0a
- SSDEEP 192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/29AIlr+8p7vWF8qa1Dojjgi:RqaCF31cix+Dc4zj9IZKFF46gi
- TLSH T13192FA3FE71368E9C106D57845FB3733DCB27CB386A6A71E1724D2B42E106A42E6E910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://10.8.1.144:9311/pJ4o
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
Targets
-
- Target 85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d
- Size 19KB
- SHA256 85a2a20a16a0c6657c7611572e3e8b5d9a16e69fff26297dd2bc91c16017d51d
- MD5 27a4065a1660feb87c5dcfd48c72486b
- SHA1 6893edda798dee4022f0562e8f360cc2b968ef56
- SHA512 7a01391547b68d891bc15f79970833d3b113cf4c3d31af76b637ad49039749c9fb86bdc553b1884c365320af737f3c576eeb01fd3f65725c5a182a159622be0a
- SSDEEP 192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/29AIlr+8p7vWF8qa1Dojjgi:RqaCF31cix+Dc4zj9IZKFF46gi
- TLSH T13192FA3FE71368E9C106D57845FB3733DCB27CB386A6A71E1724D2B42E106A42E6E910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.