Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 19:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c57a8b8eb2dcfe4eff8ad4cf5be2f512eaf45a94634473f9a09af09eac2a47bf.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c57a8b8eb2dcfe4eff8ad4cf5be2f512eaf45a94634473f9a09af09eac2a47bf.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target c57a8b8eb2dcfe4eff8ad4cf5be2f512eaf45a94634473f9a09af09eac2a47bf.exe
- Size 272KB
- Sample260916-x94phavdmf
- SHA256 c57a8b8eb2dcfe4eff8ad4cf5be2f512eaf45a94634473f9a09af09eac2a47bf
- MD5 c7620d9a84ad644283356347c41b1016
- SHA1 b32cb9b913f4aea3a34b694eb29d57c8724e1b72
- SHA512 351c8681c6476762adf2d0374fd7f9934fb071601419a97e7b230bf1c781a295e55efebe2197e80aa31bd22f30e317096d4c11b8668c6285e187b3219a74d4eb
- SSDEEP 3072:a/0EdH+/OCHKe87OXnBZJEGAiYd+fOTidC8Gn+Kdr3RHQ:acE1+2Cl/XB8iYYpoP
- TLSH T1CA445C65E932FB44C74F243968449C5FC5A72A185DF14B2EC3508B298A4BBC05B6F2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://esfxe.com:4444/link/formal.mpeg
Attributes
-
user_agent
Host: esfxe.com Connection: close User-Agent: Mozilla/5.0 (Linux; Android 11; RMX2063) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.74 Mobile Safari/537.36
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.