General
- Target da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80
- Size 645KB
- Sample260907-s473hszdpd
- SHA256 da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80
- MD5 9abf7ae7dbe7475b3e4b6a61b36dd220
- SHA1 dc580a4bf6abc509de7fb3aa89c61383f97e9799
- SHA512 63714e740fd9085f36084b1147eee44c93b6cfa3a980284f7c79b13033e0923f015a51c82f727d0714677399c453870225b0052888433b615e19e37f6a80edaf
- SSDEEP 12288:CyIEbOghGa96VBDDOu6J50EXg5/rSBtil:CyIEP0VniSEXgNrSji
- TLSH T1C9E4B56AEA31FA15C24B643954479D4FC6A33D185DF0875FC390CB2E4E1BBC05B2E26A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80.dll
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://onecoloradosport.com:443/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80
- Size 645KB
- SHA256 da05e3546d8f33dc1896336537951b1743b0c872ee1c136873c0e4265244ba80
- MD5 9abf7ae7dbe7475b3e4b6a61b36dd220
- SHA1 dc580a4bf6abc509de7fb3aa89c61383f97e9799
- SHA512 63714e740fd9085f36084b1147eee44c93b6cfa3a980284f7c79b13033e0923f015a51c82f727d0714677399c453870225b0052888433b615e19e37f6a80edaf
- SSDEEP 12288:CyIEbOghGa96VBDDOu6J50EXg5/rSBtil:CyIEP0VniSEXgNrSji
- TLSH T1C9E4B56AEA31FA15C24B643954479D4FC6A33D185DF0875FC390CB2E4E1BBC05B2E26A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.