General
- Target f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474
- Size 117KB
- Sample260907-cmq5nsec46
- SHA256 f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474
- MD5 0ee86fe8271fdeaf76906032a070a5cb
- SHA1 654e6f8055968debbf0c06c8e9b4404995a4e6b2
- SHA512 5c670e5c16a3fc750a5f13888f4c542beaad54fef049cc0739fde2b4dcc6ee03c754d31aafebf10544394fd9795f3d311e503ce32389269f192431f95e27074c
- SSDEEP 192:OPiv0hxq63spYjkH4VYH9gZv2EzNQ5uM22zzELXNXY71CHEsS15Zoc1Pr2X:Uis7q59H4ydKv2ERQ5AwwjKJCkl1TPS
- TLSH T14BC39479DD32FB08C75B641D2888DC5FC5971E186CE58B2EC3908B1A454BAC0A79F1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://www.tranews1.com:14333/Rok1
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LBBROWSER)
Targets
-
- Target f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474
- Size 117KB
- SHA256 f3c6abd39d932d8ee8acec47336ae2e76ae3d63818944fd81959ebc16c497474
- MD5 0ee86fe8271fdeaf76906032a070a5cb
- SHA1 654e6f8055968debbf0c06c8e9b4404995a4e6b2
- SHA512 5c670e5c16a3fc750a5f13888f4c542beaad54fef049cc0739fde2b4dcc6ee03c754d31aafebf10544394fd9795f3d311e503ce32389269f192431f95e27074c
- SSDEEP 192:OPiv0hxq63spYjkH4VYH9gZv2EzNQ5uM22zzELXNXY71CHEsS15Zoc1Pr2X:Uis7q59H4ydKv2ERQ5AwwjKJCkl1TPS
- TLSH T14BC39479DD32FB08C75B641D2888DC5FC5971E186CE58B2EC3908B1A454BAC0A79F1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.