General
- Target c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b
- Size 1.9MB
- Sample260907-cmkmwsec44
- SHA256 c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b
- MD5 ca18c55075cad6e08a83d6edd1db5583
- SHA1 32dc2eb7d0957cef137b360111bc578bace36af8
- SHA512 bc057524052d14614592ec7e929dec2ed68deea74c8a532a9b4d186df7bb8329c94993ea8dcad60f5c0d3205cde0b3bab6fb6e0f96d5d91a5bb64832e5767aca
- SSDEEP 24576:8SX7P1/EmHZI9KLoYghoHmH7GKjU+oJRQoY3Y5w2FYp4b:8k7ZEmHZdL0KHmyKjuw2t
- TLSH T1E7955A0BBCA1A9B4C19EA2364825954B7A72BC080FB153DB6B50B73C1F77BC05B3A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://cs.xiaojingjingaihuifeng.xyz:443/wqerqwersdgfx64.jpg
Attributes
-
user_agent
Host: cs.xiaojingjingaihuifeng.xyz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.163 Safari/535.1
Targets
-
- Target c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b
- Size 1.9MB
- SHA256 c466034fe44dc09d3075ad7e0ea81b9a05c19adc9ef74216482dff7e7ff7bf6b
- MD5 ca18c55075cad6e08a83d6edd1db5583
- SHA1 32dc2eb7d0957cef137b360111bc578bace36af8
- SHA512 bc057524052d14614592ec7e929dec2ed68deea74c8a532a9b4d186df7bb8329c94993ea8dcad60f5c0d3205cde0b3bab6fb6e0f96d5d91a5bb64832e5767aca
- SSDEEP 24576:8SX7P1/EmHZI9KLoYghoHmH7GKjU+oJRQoY3Y5w2FYp4b:8k7ZEmHZdL0KHmyKjuw2t
- TLSH T1E7955A0BBCA1A9B4C19EA2364825954B7A72BC080FB153DB6B50B73C1F77BC05B3A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.