General
- Target fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4
- Size 124KB
- Sample260907-dpwnlsv1cy
- SHA256 fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4
- MD5 6dd2bf35a38088572830534c886267d2
- SHA1 0e53ae2bcb9295e4bbeeb2a41727bac8fc4102df
- SHA512 00eb4182d9afc0affa5ea9a92f07756301356401e31127da5984afb12a1f89bedbe2f130e62f99cb8155879f4ec86888ed521917a33048ca61ac10551ccd6319
- SSDEEP 192:HgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KUNeY48FWF8qa1Dojjgi:iqaCF31cix+Dc4zjMeYfoFF46gi
- TLSH T17FC3967ADA33FE04C74B643D2485A96FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://101.43.103.253:8080/EMtW
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Targets
-
- Target fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4
- Size 124KB
- SHA256 fd584fb7e60e7cdf03a866d0057c9cf4bd17495e00ce79cf75adadbf34621eb4
- MD5 6dd2bf35a38088572830534c886267d2
- SHA1 0e53ae2bcb9295e4bbeeb2a41727bac8fc4102df
- SHA512 00eb4182d9afc0affa5ea9a92f07756301356401e31127da5984afb12a1f89bedbe2f130e62f99cb8155879f4ec86888ed521917a33048ca61ac10551ccd6319
- SSDEEP 192:HgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KUNeY48FWF8qa1Dojjgi:iqaCF31cix+Dc4zjMeYfoFF46gi
- TLSH T17FC3967ADA33FE04C74B643D2485A96FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.