General
- Target 964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938
- Size 124KB
- Sample260916-v6tn1stbpc
- SHA256 964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938
- MD5 407fcf15be56ea76b2653b81f512cf8a
- SHA1 69cf98e235ef45adbe7e1b85e8dba6beb1c49824
- SHA512 b675ec693378062598d1de99418f48369420d394d7caa592c589c50a7dcdf36d8251552a9e2a217383eb2d96631ead1c6530a36ff9c11a8e2de1462ac1d4db53
- SSDEEP 192:OgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uKdYWF8qa1Dojjgi:zqaCF31cix+Dc4zjeFF46gi
- TLSH T1D5C3967ADA33FE04C74B643D2485A96FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.126.135:80/mM3p
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSCOM)
Targets
-
- Target 964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938
- Size 124KB
- SHA256 964e3b7d7298f952c886776547f75f461471e2f843db59d5e91c82f0b2434938
- MD5 407fcf15be56ea76b2653b81f512cf8a
- SHA1 69cf98e235ef45adbe7e1b85e8dba6beb1c49824
- SHA512 b675ec693378062598d1de99418f48369420d394d7caa592c589c50a7dcdf36d8251552a9e2a217383eb2d96631ead1c6530a36ff9c11a8e2de1462ac1d4db53
- SSDEEP 192:OgV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uKdYWF8qa1Dojjgi:zqaCF31cix+Dc4zjeFF46gi
- TLSH T1D5C3967ADA33FE04C74B643D2485A96FC9E72E285CF1473DC350CB29494AAC05B5F1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.