General
- Target 5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2
- Size 124KB
- Sample260916-pta39a1aja
- SHA256 5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2
- MD5 37d8d2d2b07b6f8ef63371ee19911175
- SHA1 5c4f80c11dc1f07972cb9f1390f181f80eaad522
- SHA512 b7a529c8e42676998b5a3f89ac92c85251cf941e4394b124b2dfd5d40cac6c96dd0e5d3f26a071a977eced8824c7484286aee2845b7ad392f6947d85a1844dc1
- SSDEEP 192:HgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/20tPWF8qa1Dojjgi:iqaCF31cix+Dc4zj9tuFF46gi
- TLSH T113C3967ADA33FE04C74B643D2485A96FC9E72E285CF1472DC350CB29494ABC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://119.45.38.62:80/fUOS
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; Touch)
Targets
-
- Target 5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2
- Size 124KB
- SHA256 5ebc06b37d36716bc58c7914c0954941899a0e24971dc5d35e9a08dc4da183b2
- MD5 37d8d2d2b07b6f8ef63371ee19911175
- SHA1 5c4f80c11dc1f07972cb9f1390f181f80eaad522
- SHA512 b7a529c8e42676998b5a3f89ac92c85251cf941e4394b124b2dfd5d40cac6c96dd0e5d3f26a071a977eced8824c7484286aee2845b7ad392f6947d85a1844dc1
- SSDEEP 192:HgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/20tPWF8qa1Dojjgi:iqaCF31cix+Dc4zj9tuFF46gi
- TLSH T113C3967ADA33FE04C74B643D2485A96FC9E72E285CF1472DC350CB29494ABC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.