General
- Target 92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5
- Size 7KB
- Sample261019-swmfvav13l
- SHA256 92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5
- MD5 4ef8c3ed0e79bbb55c07e6adba7d4faf
- SHA1 4d4cc3227cbf4f212789d83036285047e8245848
- SHA512 2f7c58fd539ed380bde3408dc39aee773071af83861667a4ba9117f76d23cffe4e3b8a242a54f4cb98d08009aa0aab35c97201ee57c692eae871aebeb18c68e9
- SSDEEP 96:ShwnpbElrt9F5ZiVyQnbXefkUHHPWei7yYGXe3eBIzrDllaRqz:Sspgp1J+bXef7+XGxOLzfas
- TLSH T169E10A53BB5428A6E6F781B14ED391012E393E24C2EAD7C6A6C077A55E21791FC23722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://31.57.118.104:8089/build/v1.67/1KJJDNCRYQVA
Attributes
-
user_agent
Accept: application/xml, image/*, application/xhtml+xml Accept-Language: ur Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/2008102920 LG-E906Firefox/60.0
Targets
-
- Target 92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5
- Size 7KB
- SHA256 92b21ec925011058d14f780dc749dce2906f0e1037861f7da95bc6de887deec5
- MD5 4ef8c3ed0e79bbb55c07e6adba7d4faf
- SHA1 4d4cc3227cbf4f212789d83036285047e8245848
- SHA512 2f7c58fd539ed380bde3408dc39aee773071af83861667a4ba9117f76d23cffe4e3b8a242a54f4cb98d08009aa0aab35c97201ee57c692eae871aebeb18c68e9
- SSDEEP 96:ShwnpbElrt9F5ZiVyQnbXefkUHHPWei7yYGXe3eBIzrDllaRqz:Sspgp1J+bXef7+XGxOLzfas
- TLSH T169E10A53BB5428A6E6F781B14ED391012E393E24C2EAD7C6A6C077A55E21791FC23722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.