Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/09/2026, 00:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
205dff67c87a007280c72c48e8fae1a154f9bb8c809f70d79ffff0798773855b.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
205dff67c87a007280c72c48e8fae1a154f9bb8c809f70d79ffff0798773855b.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 205dff67c87a007280c72c48e8fae1a154f9bb8c809f70d79ffff0798773855b.exe
- Size 202KB
- Sample260908-am97facb36
- SHA256 205dff67c87a007280c72c48e8fae1a154f9bb8c809f70d79ffff0798773855b
- MD5 82d3ba8010773d66b6fb6a84d0834b50
- SHA1 cf572b51d40472c6a87051057ee97f305a10cead
- SHA512 9869bd82fce6b535044ab6d1b14158ff7bf650d7ce9f9916c447617d4ca4b930276404ae7a6c85256cef3f5f0749fa663db1b728e65f4d3f49ef7d0513c8eef2
- SSDEEP 1536:s7IDyiy6TjElCtDZp5/4ASs55At+6g3SQqjsWwd09dlVLdhHEfj:s7IDhyaj9t9pX93W+6DQ1Mbdh
- TLSH T122145666E932FA54C74B243D24449C5FC6A76E285CF14B3EC3508B194A4BBC05B6F2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://1.14.66.81:80/9cxI
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts; IE0006_ver1;EN_GB)
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.