General
- Target 4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262
- Size 5KB
- Sample261022-1blmtafx31
- SHA256 4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262
- MD5 7813cd81a67a10400613a305d00b9361
- SHA1 2432f2f15d8b412e85614ed8fdab5174e2718eb5
- SHA512 1ee480388443ae2df3f667f44cbb104a56913f29477a9294fc37e7189f6952f8626a665b167c280675bf9517ed6f00f49b00586756cd05742d6ec956e38736ba
- SSDEEP 96:PsaNjarFMmLz6yVJEHxI3Pf3xYP1lhxYRXO:Pt1SdLz5GHx4aP8O
- TLSH T161B10AB5E16549D9C02542B48B735B72B27A78E2C37E1E339950E7561C30E203F04741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://31.57.118.104:8089/build/v1.67/1KJJDNCRYQVA
Attributes
-
user_agent
Accept: application/xml, image/*, application/xhtml+xml Accept-Language: ur Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/2008102920 LG-E906Firefox/60.0
Targets
-
- Target 4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262
- Size 5KB
- SHA256 4b0b6195efc67b092627f1c5df9dae89ed4d0908522b65637031f2d149b24262
- MD5 7813cd81a67a10400613a305d00b9361
- SHA1 2432f2f15d8b412e85614ed8fdab5174e2718eb5
- SHA512 1ee480388443ae2df3f667f44cbb104a56913f29477a9294fc37e7189f6952f8626a665b167c280675bf9517ed6f00f49b00586756cd05742d6ec956e38736ba
- SSDEEP 96:PsaNjarFMmLz6yVJEHxI3Pf3xYP1lhxYRXO:Pt1SdLz5GHx4aP8O
- TLSH T161B10AB5E16549D9C02542B48B735B72B27A78E2C37E1E339950E7561C30E203F04741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.