General
- Target 05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7
- Size 551KB
- Sample260916-hd4bjaweph
- SHA256 05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7
- MD5 b3210071cccb37f32ccdcd04b7d6ebe9
- SHA1 01ad8bec8a73fa93d91ce7765664a64a188aa6ac
- SHA512 fe82d03b5349e2d06e5e778be1eb1170354e91780d65bd30a7f507052a59005bf3a5d16e0297c2190899d0a693161dd03460e05a82a14226b75dcf8ba7f0af93
- SSDEEP 6144:kzW+itIxRMfY3XpcXpLSyYCD+2Ri8X3e2SpTyzu:DXt4MfKpgpT+SOdyzu
- TLSH T12DC41F74A9E2FA07C66AD03B14408CDB81EB2D1859E1461EC750BB1BC9B6EC0771E9F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://8.137.164.212:4000/J5jt
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;PTBR)
Targets
-
- Target 05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7
- Size 551KB
- SHA256 05905d7a4f90df1da8bb6196c332bec310a2333695341fcb514630fa1aa62bc7
- MD5 b3210071cccb37f32ccdcd04b7d6ebe9
- SHA1 01ad8bec8a73fa93d91ce7765664a64a188aa6ac
- SHA512 fe82d03b5349e2d06e5e778be1eb1170354e91780d65bd30a7f507052a59005bf3a5d16e0297c2190899d0a693161dd03460e05a82a14226b75dcf8ba7f0af93
- SSDEEP 6144:kzW+itIxRMfY3XpcXpLSyYCD+2Ri8X3e2SpTyzu:DXt4MfKpgpT+SOdyzu
- TLSH T12DC41F74A9E2FA07C66AD03B14408CDB81EB2D1859E1461EC750BB1BC9B6EC0771E9F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.