General
- Target 7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2
- Size 7KB
- Sample261020-f7d8dsds5s
- SHA256 7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2
- MD5 4610dc858e7b9c76838188f26115b7b0
- SHA1 276c28ef2e85bd431de391c2fb4137a5fb7d3e3b
- SHA512 8eeeee9895fbbc5316286ce5930e893d056f5890b6030e5d66a9e9b9146b9861284f448c61c275dc7e216c6f506bfe50b3c33c336b658f74b2896569ac10ae57
- SSDEEP 96:Lve81UGgHrr5bO9K3Z7JAnobcmHtYeBIzrDllaRqz:FGg9K3Z9aoAmGzfas
- TLSH T188E12B9693FC07F7E0E6827671A6533465367F20CACF964D6D94F2925F103606E212E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://31.57.118.104:8089/build/v1.67/1KJJDNCRYQVA
Attributes
-
user_agent
Accept: application/xml, image/*, application/xhtml+xml Accept-Language: ur Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/2008102920 LG-E906Firefox/60.0
Targets
-
- Target 7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2
- Size 7KB
- SHA256 7a900d732d85b2dbc80e1fb161b2046504bed59c8515c0fc96abc48458f04bb2
- MD5 4610dc858e7b9c76838188f26115b7b0
- SHA1 276c28ef2e85bd431de391c2fb4137a5fb7d3e3b
- SHA512 8eeeee9895fbbc5316286ce5930e893d056f5890b6030e5d66a9e9b9146b9861284f448c61c275dc7e216c6f506bfe50b3c33c336b658f74b2896569ac10ae57
- SSDEEP 96:Lve81UGgHrr5bO9K3Z7JAnobcmHtYeBIzrDllaRqz:FGg9K3Z9aoAmGzfas
- TLSH T188E12B9693FC07F7E0E6827671A6533465367F20CACF964D6D94F2925F103606E212E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.