General
- Target bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e
- Size 124KB
- Sample260907-dr2mmsv1gy
- SHA256 bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e
- MD5 976eab58bd360dafc4c4e5c3736e5fb4
- SHA1 d6cac628035636c3c3efe622c071ed97a0ed80b6
- SHA512 ed578f087d0dbb05b9d48ba3befb487bb999702fd75bd9f2a1b1e1cfa3c020dfe859cc0502aac72c2dcc3f59d0b2b5731fb66d6d818c1fb1ccbe422e921d4c17
- SSDEEP 192:egV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Oeqejcn9WF8qa1Dojjgi:DqaCF31cix+Dc4zjFxfwFF46gi
- TLSH T14EC3967ADA33FE04C74B643D2489996FC9E72E285CF1472DC350CB29494ABC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://124.221.41.140:5555/FsaC
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)
Targets
-
- Target bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e
- Size 124KB
- SHA256 bb0ab195131d39235dcac040c09314a99eb367c16d1d167526a406dd9a7ae63e
- MD5 976eab58bd360dafc4c4e5c3736e5fb4
- SHA1 d6cac628035636c3c3efe622c071ed97a0ed80b6
- SHA512 ed578f087d0dbb05b9d48ba3befb487bb999702fd75bd9f2a1b1e1cfa3c020dfe859cc0502aac72c2dcc3f59d0b2b5731fb66d6d818c1fb1ccbe422e921d4c17
- SSDEEP 192:egV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Oeqejcn9WF8qa1Dojjgi:DqaCF31cix+Dc4zjFxfwFF46gi
- TLSH T14EC3967ADA33FE04C74B643D2489996FC9E72E285CF1472DC350CB29494ABC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.