General
- Target 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
- Size 298KB
- Sample260922-3kt2natgph
- SHA256 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
- MD5 dddc6daf8f47a8ae1ad5e9e5b296ed7f
- SHA1 550e663dc4f46bc7d3e0eb00cf3f3618c46d642b
- SHA512 22ff8d3412502ca3d06039f9a6fe8b404ea863e12a103dd6376d2619c057e5dcd16158e24dbb3e540108890bdab0e4181ac12c4872892338662681a86ab2cb09
- SSDEEP 3072:W0L2F+czJ4gjdrlRP5CPoDJMNXEepfjWEPY4vZhuGnrTTTr3EgEJmm:hKFDFRdrT5CPoDSX1fjWETPUDJmm
- TLSH T198547066E932FA44C75B24392444985FC6A72E285DF14B3EC3508B2D4A4FFC05B5F2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://duladani.com:443/wp-includes/favicon.gif
Attributes
-
user_agent
Host: google.fr Connection: close Accept: image/jpeg Accept-Encoding: gzip, br User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9
Targets
-
- Target 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
- Size 298KB
- SHA256 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
- MD5 dddc6daf8f47a8ae1ad5e9e5b296ed7f
- SHA1 550e663dc4f46bc7d3e0eb00cf3f3618c46d642b
- SHA512 22ff8d3412502ca3d06039f9a6fe8b404ea863e12a103dd6376d2619c057e5dcd16158e24dbb3e540108890bdab0e4181ac12c4872892338662681a86ab2cb09
- SSDEEP 3072:W0L2F+czJ4gjdrlRP5CPoDJMNXEepfjWEPY4vZhuGnrTTTr3EgEJmm:hKFDFRdrT5CPoDSX1fjWETPUDJmm
- TLSH T198547066E932FA44C75B24392444985FC6A72E285DF14B3EC3508B2D4A4FFC05B5F2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.