General
- Target 66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194
- Size 124KB
- Sample260907-xcc6aa1yew
- SHA256 66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194
- MD5 3927783fc2a49b889a1d3a972879ef3a
- SHA1 1612052ad12eb667fbbdec5fd673d5442f18858a
- SHA512 8b8621743f9d3258977eab2072e9e829048f9948fda9f9c427c89c3f23cb987c20a47f02e5378535ab712a9cb8eb14614132348d89ad5dcaac286cfd126f3bf4
- SSDEEP 192:ZgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/292v/LlWF8qa1Dojjgi:IqaCF31cix+Dc4zjdv/sFF46gi
- TLSH T1F1C3967ADA33FE04C74B643D2485996FC9E72E285CF1472DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://47.120.3.3:8044/lRk4
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; BOIE8;ENUS)
Targets
-
- Target 66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194
- Size 124KB
- SHA256 66a660602e64061bcea3ae07ff7788129b674efb76ec5129d368110a1a69e194
- MD5 3927783fc2a49b889a1d3a972879ef3a
- SHA1 1612052ad12eb667fbbdec5fd673d5442f18858a
- SHA512 8b8621743f9d3258977eab2072e9e829048f9948fda9f9c427c89c3f23cb987c20a47f02e5378535ab712a9cb8eb14614132348d89ad5dcaac286cfd126f3bf4
- SSDEEP 192:ZgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/292v/LlWF8qa1Dojjgi:IqaCF31cix+Dc4zjdv/sFF46gi
- TLSH T1F1C3967ADA33FE04C74B643D2485996FC9E72E285CF1472DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.