General
- Target b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f
- Size 5.1MB
- Sample260916-npjddsap8x
- SHA256 b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f
- MD5 3432028f094625a70277b85639e3bcb2
- SHA1 56d3aacb5f9085d337ca49639ed4c5824bd4baf6
- SHA512 13ed924d923e41c1624f6f9503b615e79bb4fd56aca2e053c71426481df0dccc996ce80889a2a056b6afbb9d0711b1d14fa57d76cb4dafc134347354eea7f4f4
- SSDEEP 49152:zLz4NuGXNFh/rb/TQvO90d7HjmAFd4A64nsfJXeYgFYjC1:zHuh
- TLSH T14E462947FCA1B574C2AE61354860555BA772BC180FB103EBAB50A7B81E77BC01F3A369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.158.128:443/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f
- Size 5.1MB
- SHA256 b58ccd715f3d1e69afbc8785c3c180d603ce2e6ae0f6f71af6a39202196f1e9f
- MD5 3432028f094625a70277b85639e3bcb2
- SHA1 56d3aacb5f9085d337ca49639ed4c5824bd4baf6
- SHA512 13ed924d923e41c1624f6f9503b615e79bb4fd56aca2e053c71426481df0dccc996ce80889a2a056b6afbb9d0711b1d14fa57d76cb4dafc134347354eea7f4f4
- SSDEEP 49152:zLz4NuGXNFh/rb/TQvO90d7HjmAFd4A64nsfJXeYgFYjC1:zHuh
- TLSH T14E462947FCA1B574C2AE61354860555BA772BC180FB103EBAB50A7B81E77BC01F3A369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.