General
- Target 6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f
- Size 124KB
- Sample260916-nrfqaazcnb
- SHA256 6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f
- MD5 afb9c2ae3a95439c11392f2f5f932b6f
- SHA1 36f8b679b100996625dd8c6193cd62d91ba47186
- SHA512 1d68b1fbadc6012745e951578ec35dc694fa9d666fbe0f0e54948dc4d0ebc53641a3dd7e857f0a5f03ab67c4e4c218307ed4d943d4c74906b3e62b82f242b9f7
- SSDEEP 192:hgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2W8qaWF9WF8qa1Dojjgi:AqaCF31cix+Dc4zjSqiFF46gi
- TLSH T104C3967ADA33FE04C74B643D2489996FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://146.190.120.217:2369/QfDb
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Targets
-
- Target 6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f
- Size 124KB
- SHA256 6cb5a0d72b14e3f9462a13f6b7bbc174e00de906ffff15a8bf57d4d265553d5f
- MD5 afb9c2ae3a95439c11392f2f5f932b6f
- SHA1 36f8b679b100996625dd8c6193cd62d91ba47186
- SHA512 1d68b1fbadc6012745e951578ec35dc694fa9d666fbe0f0e54948dc4d0ebc53641a3dd7e857f0a5f03ab67c4e4c218307ed4d943d4c74906b3e62b82f242b9f7
- SSDEEP 192:hgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2W8qaWF9WF8qa1Dojjgi:AqaCF31cix+Dc4zjSqiFF46gi
- TLSH T104C3967ADA33FE04C74B643D2489996FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.