General
- Target dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9
- Size 1.9MB
- Sample261002-d4vd4agd28
- SHA256 dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9
- MD5 4ca8ae065f858052c83d111436c182a9
- SHA1 92b3687d17a7e28f615a3b7588ceaf2c6d0bad9b
- SHA512 6406733813c48624cfd30da223550f7f2d7179f8f2f4c1472648386714bbfb68a460f0fab4d25fe2cbc78de1c52836634ce8f5760b04772644c516395e30181d
- SSDEEP 49152:fV9cHfn/PusHsci4mxGi95l+AiKVYZrsvhw8X:t9QJUVVss5nX
- TLSH T189955C02FCF2B97CC6ADB13204A56A67763378284772374B4B445A6E495EFD02F2E364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://39.108.159.100:9898/HJja
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Xbox)
Targets
-
- Target dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9
- Size 1.9MB
- SHA256 dfc8367d8902c264c15df41ec3ce42f669fd016da68f3f023d0401ff0c213fa9
- MD5 4ca8ae065f858052c83d111436c182a9
- SHA1 92b3687d17a7e28f615a3b7588ceaf2c6d0bad9b
- SHA512 6406733813c48624cfd30da223550f7f2d7179f8f2f4c1472648386714bbfb68a460f0fab4d25fe2cbc78de1c52836634ce8f5760b04772644c516395e30181d
- SSDEEP 49152:fV9cHfn/PusHsci4mxGi95l+AiKVYZrsvhw8X:t9QJUVVss5nX
- TLSH T189955C02FCF2B97CC6ADB13204A56A67763378284772374B4B445A6E495EFD02F2E364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.