General
- Target 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
- Size 1.5MB
- Sample260916-kgbf2ass5n
- SHA256 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
- MD5 327ba3db2879a783026a9c8db4f42d2e
- SHA1 c2193196c46a59e58a4cc48f08ffe8ce87a18c86
- SHA512 287bf9077b9757ba7ac08af8423733a8f8d2306f07db6436695bad65b878ff60963ef598594de2fad3e3f5711f45c23443f1d01c1df39e2894c24ae2d316810c
- SSDEEP 24576:BFtGDEEpmgjotoEW3kfNSAK6oLUb75zMzSjNtJHilf5FZ/x:BKDEEpmgjotE3aSAKJsueRfHof5h
- TLSH T1A3654B12ACF2BC79C67AF131186195A77673782807B26BDB4B444A3D065BEC02F3E365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://120.79.218.54:9999/KYtE
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)
Targets
-
- Target 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
- Size 1.5MB
- SHA256 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
- MD5 327ba3db2879a783026a9c8db4f42d2e
- SHA1 c2193196c46a59e58a4cc48f08ffe8ce87a18c86
- SHA512 287bf9077b9757ba7ac08af8423733a8f8d2306f07db6436695bad65b878ff60963ef598594de2fad3e3f5711f45c23443f1d01c1df39e2894c24ae2d316810c
- SSDEEP 24576:BFtGDEEpmgjotoEW3kfNSAK6oLUb75zMzSjNtJHilf5FZ/x:BKDEEpmgjotE3aSAKJsueRfHof5h
- TLSH T1A3654B12ACF2BC79C67AF131186195A77673782807B26BDB4B444A3D065BEC02F3E365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.