General
- Target 2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.zip
- Size 8KB
- Sample261003-vyc2astbpg
- SHA256 d7adc89e8aeacda035336ec4a0a1aeb7e3a239e91b4bc828d06c639772fc83b3
- MD5 f0c672a9c60ee9fc83563178a0435ed8
- SHA1 323fea2eb6d18b374b032cf5f7d23fa098a4d242
- SHA512 d5ba1978305b1502677f5015aa551059a4ec558c2650d556659e583b2b6041a6cbee1a74c577687591ff3bb16601597bb32c7f36a33b8277e42af3731ec8e0c6
- SSDEEP 192:w3nwEG1JO3iACZVhs0IDliBbNWETVJ2/30mOsgQYjeNOiJzM:UnjgO3GZVhs0IDliBbEmJ2/30mOsXYjR
- TLSH T1DD029E52800FAD6BD488BD30AE24EA136BE451A30E65D2DC73E6F1A0624DFC2C758E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://39.100.66.238:80/GrLX
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; IEMobile/9.0; LG; LG-E906)
Targets
-
- Target 2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe
- Size 19KB
- SHA256 2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4
- MD5 0b9bde384dac136914f21b8e5483c409
- SHA1 25e750a10bc1d263e969d962f567fc55fbceff44
- SHA512 2e1693d52bcf0da6940180380156c216cf3570c8b7bdb16b46f01bdc0962992e9c5352dccec5c250c8f267d723122795a2415751f14e16a0eb717ebef12f3cb2
- SSDEEP 192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dn9HysLn3WF8qa1Dojjgi:5qaCF31cix+Dc4zjInJ7LGFF46gi
- TLSH T19292D83FE31358E9C506D5B845FF3733DCB139B385A6A32E2724D2B42E106A46E6E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.