General
- Target 2026-09-19_b001597bcb2930ec0f7537b0e864ed07_cobalt-strike_conti_icedid_njrat_satacom_vidar
- Size 729KB
- Sample260919-btmv6avglg
- SHA256 a42479d5949c2fd695efc880105943e029e6232005da6902cc9b96d4dc6bf558
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
Botnet
-
1359593325
C2
-
http://help.mscode.ml:53/assets/images/home-debug.svg
-
http://h.mscode.ml:53/assets/images/home-debug.svg
Attributes
-
access_type
512
-
beacon_type
256
-
dns_idle
1.34744072e+08
-
host
help.mscode.ml,h.mscode.ml
-
http_method1
GET
-
http_method2
GET
-
jitter
5120
-
maxdns
235
-
polling_time
20000
-
port_number
53
-
sc_process32
%windir%\syswow64\gpupdate.exe
-
sc_process64
%windir%\sysnative\gpupdate.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLXN3QJmnYIcQX7ZuR6LeUnP9QTJ28AfISFui186MrOqhUXPxPDQmuMolppLI+1aPy02gbdxr6uPom/NxI7tRcESbzwPhZrDz7lRs3W/MfKzmTApVu/7Wf90DYUICHuUIbRhOKikrIJxWwTC9ArD2AAz1F6r3NscKWYlu22dadJwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
3.59721088e+09
-
unknown3
1.610612736e+09
-
watermark
1359593325
Targets
-
- Target 2026-09-19_b001597bcb2930ec0f7537b0e864ed07_cobalt-strike_conti_icedid_njrat_satacom_vidar
- Size 729KB
- SHA256 a42479d5949c2fd695efc880105943e029e6232005da6902cc9b96d4dc6bf558
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.