General
- Target d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c
- Size 145KB
- Sample260924-c2fbqacc63
- SHA256 d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c
- MD5 ef5034592abd0bb4aa94622b75ab1489
- SHA1 73dffa599ef17f8fbab81a68f241e61c86d1ab31
- SHA512 bad3347eb2c4831d1bd0eb748ee5e20d752470827d411ee3023f3ba550c1d4cfa3c5d4a43a3d639a33b30dec2f2ce9389a91c9f1603c6f9106256c85ee0bc145
- SSDEEP 384:S9Zrb5YW85hxy4lVX4AYWjgToP6kqwjwPhNdByD215rN:M58784z4ARE06kxKhLByDGN
- TLSH T1A6E3E865E932FA05C78F243E24889C6F859B1E185FE146EFC3908B1D454AAC0577E2EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://120.26.240.21:8080/ePEc
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; ASU2JS)
Targets
-
- Target d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c
- Size 145KB
- SHA256 d9a00d8dc918939bf98a9082bd7101dfa5398e20041fffddcbb18bcbdafc251c
- MD5 ef5034592abd0bb4aa94622b75ab1489
- SHA1 73dffa599ef17f8fbab81a68f241e61c86d1ab31
- SHA512 bad3347eb2c4831d1bd0eb748ee5e20d752470827d411ee3023f3ba550c1d4cfa3c5d4a43a3d639a33b30dec2f2ce9389a91c9f1603c6f9106256c85ee0bc145
- SSDEEP 384:S9Zrb5YW85hxy4lVX4AYWjgToP6kqwjwPhNdByD215rN:M58784z4ARE06kxKhLByDGN
- TLSH T1A6E3E865E932FA05C78F243E24889C6F859B1E185FE146EFC3908B1D454AAC0577E2EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.