General
- Target 2026-09-24_e672d1ba1fb32c894bd10716d3f987f7_cobalt-strike
- Size 1.7MB
- Sample260924-xt5a4agg68
- SHA256 d73e8a91b4b6280ba4b7b3fc5e6bf821b4de868b15b867c035b80703a23ab5b1
- MD5 e672d1ba1fb32c894bd10716d3f987f7
- SHA1 1e01952271911eb64111e078de56fe0e3e92e506
- SHA512 1a7350690366c62f618c492c3355879a987337e7add905659ca8870940a4393766d6814c47de6208414f45b6aeb5c7f92b8599d53bfcd0fdc4246ef09350f6c6
- SSDEEP 49152:8OkdKo3rb/TGvO90dL3BmAFd4A64nsfJHglgL/bx6JRI9AFJ:8O9mrb99A
- TLSH T10E856B17FCE1F878C6AA9135486484976673B41D0B7117DB9B408B7A1AAFBC01F3D3A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_e672d1ba1fb32c894bd10716d3f987f7_cobalt-strike.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_e672d1ba1fb32c894bd10716d3f987f7_cobalt-strike.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://47.94.236.117:9999/Zia9
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)
Targets
-
- Target 2026-09-24_e672d1ba1fb32c894bd10716d3f987f7_cobalt-strike
- Size 1.7MB
- SHA256 d73e8a91b4b6280ba4b7b3fc5e6bf821b4de868b15b867c035b80703a23ab5b1
- MD5 e672d1ba1fb32c894bd10716d3f987f7
- SHA1 1e01952271911eb64111e078de56fe0e3e92e506
- SHA512 1a7350690366c62f618c492c3355879a987337e7add905659ca8870940a4393766d6814c47de6208414f45b6aeb5c7f92b8599d53bfcd0fdc4246ef09350f6c6
- SSDEEP 49152:8OkdKo3rb/TGvO90dL3BmAFd4A64nsfJHglgL/bx6JRI9AFJ:8O9mrb99A
- TLSH T10E856B17FCE1F878C6AA9135486484976673B41D0B7117DB9B408B7A1AAFBC01F3D3A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.