General
- Target 74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e
- Size 7.8MB
- Sample261002-e818wavz8q
- SHA256 74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e
- MD5 27b9944ef6ee005854b098553de62ac9
- SHA1 b3204a12e24eb1117018ac87d9cdd2c5942df7db
- SHA512 6497183b5e839ae6b43dc611b9e8c210cdcc04e7445a5fcaf71e9015e14454695d0f8d5f541484279fbe291374bbf40220df65617099b123cacce35c369f48dc
- SSDEEP 196608:YQUVV1W903eV4Q2tpDjIIAcwDeSEDRP0vvk9LIL:AFW+eGQi9jorghk
- TLSH T193862365D972FF44CB5B243E2844885FC5A72E285DF1872FC360CB190A5BBC0576F2AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://141.98.197.31:7785/AieN
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)
Targets
-
- Target 74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e
- Size 7.8MB
- SHA256 74abb940724692a028b06e51007df00be23cf95396033033829b0b525286910e
- MD5 27b9944ef6ee005854b098553de62ac9
- SHA1 b3204a12e24eb1117018ac87d9cdd2c5942df7db
- SHA512 6497183b5e839ae6b43dc611b9e8c210cdcc04e7445a5fcaf71e9015e14454695d0f8d5f541484279fbe291374bbf40220df65617099b123cacce35c369f48dc
- SSDEEP 196608:YQUVV1W903eV4Q2tpDjIIAcwDeSEDRP0vvk9LIL:AFW+eGQi9jorghk
- TLSH T193862365D972FF44CB5B243E2844885FC5A72E285DF1872FC360CB190A5BBC0576F2AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Loads dropped DLL