General
- Target 2026-09-12_bb373b8f6e51b1ee2805734fe6514e23_cobalt-strike_conti
- Size 766KB
- Sample260912-xcqrdavvft
- SHA256 0353adb0a65d9f422c4f132f03191a80b978d6d33e3923562aba05384a259aba
- MD5 bb373b8f6e51b1ee2805734fe6514e23
- SHA1 2130f5b591d0e50e4e2d983dd4ee87be7dddb523
- SHA512 7381deff1b3ba326a4efdd8a9cdae751ee68d13082bff1231c7a0e7dde35647a48e5f310743af937a3a4c0d1af73a575a5edce81dd1f739847a4b9872bf6cc77
- SSDEEP 12288:vh98+13WZYeZctym1GtSjubJJ1zF0KSVraG:f8yWavN81zF0KSVraG
- TLSH T1A8F4398277DA4CFBEE52273854DB53327736FE608B6B8B675A18C2311C13AD1AD4A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_bb373b8f6e51b1ee2805734fe6514e23_cobalt-strike_conti.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_bb373b8f6e51b1ee2805734fe6514e23_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_bb373b8f6e51b1ee2805734fe6514e23_cobalt-strike_conti
- Size 766KB
- SHA256 0353adb0a65d9f422c4f132f03191a80b978d6d33e3923562aba05384a259aba
- MD5 bb373b8f6e51b1ee2805734fe6514e23
- SHA1 2130f5b591d0e50e4e2d983dd4ee87be7dddb523
- SHA512 7381deff1b3ba326a4efdd8a9cdae751ee68d13082bff1231c7a0e7dde35647a48e5f310743af937a3a4c0d1af73a575a5edce81dd1f739847a4b9872bf6cc77
- SSDEEP 12288:vh98+13WZYeZctym1GtSjubJJ1zF0KSVraG:f8yWavN81zF0KSVraG
- TLSH T1A8F4398277DA4CFBEE52273854DB53327736FE608B6B8B675A18C2311C13AD1AD4A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1