General
- Target 828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732
- Size 2.4MB
- Sample260907-dtx28swsax
- SHA256 828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732
- MD5 1092484a45ebfbb17579ebc438e2b92e
- SHA1 adcf8cd603d6134231b6750605b4f02b3b207bf1
- SHA512 c5e1560f991f3a2c37b75e85c61e046461d194724cfac1b27e7a4a09f88e4a8833dbaea86179121b607c602d0e327a26dd52c268a8e777832b3aeec13346185e
- SSDEEP 24576:1veWKrYSCl1GzywSXvsDZkgPUqr1+C6p1tnZU0:pKrYSAdwY+k13
- TLSH T10AC54B53F8E65C64C8AE9274646A811AE9723C1C0FB623DF5390B7341F737E14A3AB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://43.143.198.113:4567/mq2M
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)
Targets
-
- Target 828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732
- Size 2.4MB
- SHA256 828f3877f21419703b090908ff0a2d3b4be76fde77d02a273ebdf9c81d5c4732
- MD5 1092484a45ebfbb17579ebc438e2b92e
- SHA1 adcf8cd603d6134231b6750605b4f02b3b207bf1
- SHA512 c5e1560f991f3a2c37b75e85c61e046461d194724cfac1b27e7a4a09f88e4a8833dbaea86179121b607c602d0e327a26dd52c268a8e777832b3aeec13346185e
- SSDEEP 24576:1veWKrYSCl1GzywSXvsDZkgPUqr1+C6p1tnZU0:pKrYSAdwY+k13
- TLSH T10AC54B53F8E65C64C8AE9274646A811AE9723C1C0FB623DF5390B7341F737E14A3AB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.