General
- Target 2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb
- Size 2.0MB
- Sample260919-vs4xtsvwfx
- SHA256 2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb
- MD5 5574d3269e226f80222b5297eff919c2
- SHA1 3f1ab1747ee6cd40347455121ebff05196461d6e
- SHA512 1ddee68efe036ca082529302ac79726f91a412f8ee82b9754555d7087c30566bfd4dfad7e1b85c29648ce8952cec421e930e6a0632c95faf2323b3db2bfb676e
- SSDEEP 24576:ZYlJXepOovecoTdgmyw05H1lJplibEUNxFlbE1S:+Xexvec0QwEHJybE8vbE1S
- TLSH T133A53B16FCB39AB5C66EF1348451926376723C684B322BDB5F80AA290A75FC02F3D355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://test.sajhklfh.xyz:80/toA9
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM) Host: test.sajhklfh.xyz
Targets
-
- Target 2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb
- Size 2.0MB
- SHA256 2392917fbc94eda07779963c79c6562695dcb36d92c4998673cc03e8cd7d85eb
- MD5 5574d3269e226f80222b5297eff919c2
- SHA1 3f1ab1747ee6cd40347455121ebff05196461d6e
- SHA512 1ddee68efe036ca082529302ac79726f91a412f8ee82b9754555d7087c30566bfd4dfad7e1b85c29648ce8952cec421e930e6a0632c95faf2323b3db2bfb676e
- SSDEEP 24576:ZYlJXepOovecoTdgmyw05H1lJplibEUNxFlbE1S:+Xexvec0QwEHJybE8vbE1S
- TLSH T133A53B16FCB39AB5C66EF1348451926376723C684B322BDB5F80AA290A75FC02F3D355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.