General
- Target e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7
- Size 5.0MB
- Sample260906-19m9astenh
- SHA256 e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7
- MD5 94cbea603b875650b4e782ea334a3c50
- SHA1 e38314301497ceb81e10eaab258857486eb65e51
- SHA512 a14c6b027e67f0a5506c5741d8a34c81d9603bfa66a6eeb36a6a71f87323eac8f8eae8ce94248c3650def461bcf3cd8f27a8f4f542e270afcd65ae972193f174
- SSDEEP 98304:sIpSgpzoLLJ3TbwaVvrZE0I8EQxPP312CDvSkkC9ZL+5FaNzuAD:sIJ9onJ5hrZERmH34lCjqrYqA
- TLSH T167361265EA33FE44DB4B243D24849C5FC6A72E185DF1872EC3508B194A4BBC0576F2AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://118.89.125.171:6536/axCA
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Targets
-
- Target e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7
- Size 5.0MB
- SHA256 e344d7cab2a5ae276961da3e39cdc4dec63f1cab6367a7d63e8a733458c491b7
- MD5 94cbea603b875650b4e782ea334a3c50
- SHA1 e38314301497ceb81e10eaab258857486eb65e51
- SHA512 a14c6b027e67f0a5506c5741d8a34c81d9603bfa66a6eeb36a6a71f87323eac8f8eae8ce94248c3650def461bcf3cd8f27a8f4f542e270afcd65ae972193f174
- SSDEEP 98304:sIpSgpzoLLJ3TbwaVvrZE0I8EQxPP312CDvSkkC9ZL+5FaNzuAD:sIJ9onJ5hrZERmH34lCjqrYqA
- TLSH T167361265EA33FE44DB4B243D24849C5FC6A72E185DF1872EC3508B194A4BBC0576F2AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Loads dropped DLL