General
- Target dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f
- Size 241KB
- Sample260906-x1cvesch45
- SHA256 dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f
- MD5 a8d5f0d4dd938fe2bdc94c1c98b0a911
- SHA1 aad0c53f10cdbb8ebdcc4bd99391b1e6d937f8b2
- SHA512 6c653fd7378bfadab73c323486233c30faee85b088a8222536c86a7036ff264626ae9c1563a0a4b9c8c4183c0f6556f87bb191b74ec2a2f9ecb4206dd4a3e9ca
- SSDEEP 1536:+LgeZQX4HbvMVQ3/irFIEXs9qWcU9Y9SW9q+j/cKq32NzsWBd7B9dlvdrU59ls7a:8gcXQOW891cUS9T9q+j/pO27VMZl1
- TLSH T1B334FB66EA32FA54C74B243D2444985FD6E72E285CF1473EC3508B1D4A4BBC05B6F2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://101.42.233.208:80/oDr8
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENGB)
Targets
-
- Target dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f
- Size 241KB
- SHA256 dfafccd041da5c2e1a98ef05527c3ac50739dd614a6c420b8a94b0f931a6ff2f
- MD5 a8d5f0d4dd938fe2bdc94c1c98b0a911
- SHA1 aad0c53f10cdbb8ebdcc4bd99391b1e6d937f8b2
- SHA512 6c653fd7378bfadab73c323486233c30faee85b088a8222536c86a7036ff264626ae9c1563a0a4b9c8c4183c0f6556f87bb191b74ec2a2f9ecb4206dd4a3e9ca
- SSDEEP 1536:+LgeZQX4HbvMVQ3/irFIEXs9qWcU9Y9SW9q+j/cKq32NzsWBd7B9dlvdrU59ls7a:8gcXQOW891cUS9T9q+j/pO27VMZl1
- TLSH T1B334FB66EA32FA54C74B243D2444985FD6E72E285CF1473EC3508B1D4A4BBC05B6F2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.