General
- Target 3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385
- Size 1.8MB
- Sample260916-2mxpwsfb82
- SHA256 3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385
- MD5 03904558b243869deafd33c7aca11f16
- SHA1 b6799fd156d0af288a330c51d46cd55b1ab69775
- SHA512 c00ae215aaa36e263bcbc54e7690d7c01667b632a38ad1a35d1b6bf3ea6c91294ebfda9ce0800921185ed22f4ee4e16249782c97a3b866c57cf40f9462047cb8
- SSDEEP 49152:BE6G9taeXe7AbSCDneCYgtPYgn3+2lz1:r7un
- TLSH T12F853816FC61B9A8C29EA13148659557AA627C180F7103DFAB40F3BC1F77BD05B3A368
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://195.181.245.38:7966/QTUc
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
Targets
-
- Target 3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385
- Size 1.8MB
- SHA256 3e9e464c2a54dd9ffbdafe955aeb162ca9f0b95926683643e24adf16238f0385
- MD5 03904558b243869deafd33c7aca11f16
- SHA1 b6799fd156d0af288a330c51d46cd55b1ab69775
- SHA512 c00ae215aaa36e263bcbc54e7690d7c01667b632a38ad1a35d1b6bf3ea6c91294ebfda9ce0800921185ed22f4ee4e16249782c97a3b866c57cf40f9462047cb8
- SSDEEP 49152:BE6G9taeXe7AbSCDneCYgtPYgn3+2lz1:r7un
- TLSH T12F853816FC61B9A8C29EA13148659557AA627C180F7103DFAB40F3BC1F77BD05B3A368
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.