General
- Target d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff
- Size 145KB
- Sample260916-ycjthavdqa
- SHA256 d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff
- MD5 7b8fd681656d5b9cd11376f19313ac6a
- SHA1 4ad7580f89d818e8c2b5c1d000cd4cb4ef3aac8f
- SHA512 fc5825671891f50e4936bc5d4f6c704c73abc0d878e99884ebd0a1ca17259c12999a9a8f4e453600cc6cf0b33749c1e40d8edc371b805530225b30c63e2e8dde
- SSDEEP 768:ZgwBa8CmbwTBunOcN1MdS4o8BWPKbKqBNYNyH7:HonTkwS4oqiiYNC
- TLSH T1DAE33B65EE32FE04CB4F242D2445985FC6E72E185DE1476EC390CB194A4BBC06B6F1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://43.143.198.113:4567/AzYI
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)
Targets
-
- Target d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff
- Size 145KB
- SHA256 d4df1df959a86c84428a9b30590f86a4744dce5e2d80f00763d88b9f12e3adff
- MD5 7b8fd681656d5b9cd11376f19313ac6a
- SHA1 4ad7580f89d818e8c2b5c1d000cd4cb4ef3aac8f
- SHA512 fc5825671891f50e4936bc5d4f6c704c73abc0d878e99884ebd0a1ca17259c12999a9a8f4e453600cc6cf0b33749c1e40d8edc371b805530225b30c63e2e8dde
- SSDEEP 768:ZgwBa8CmbwTBunOcN1MdS4o8BWPKbKqBNYNyH7:HonTkwS4oqiiYNC
- TLSH T1DAE33B65EE32FE04CB4F242D2445985FC6E72E185DE1476EC390CB194A4BBC06B6F1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.