General
- Target 28eb0346af97d4d022826e45263dcb93.exe
- Size 8KB
- Sample261023-hmmedaat3v
- SHA256 5e1d7ed440028b43d375c9ef1c451ae41533ac8db344a0e13d89def501169e8a
- MD5 28eb0346af97d4d022826e45263dcb93
- SHA1 a3be37f3017e676324c67df70a4af2a7d03d0b2d
- SHA512 7b63b107eb25e9c6d1a325d8604ee52abea990ccc8f2e2d0d79974ae293cd174397b4d33ba80fbff49b263f3ff9c2b9400dab87cfa107866d894df34eb15378c
- SSDEEP 96:62y0bsWxx/y61GKFcr5bO9K3Z7JAnobcmHt8/nzxkIO8h7laRqz:Awf3H159K3Z9aoAmKSh6as
- TLSH T10F022CA173F816B7D08B8A707C75A2142533BE50DEFBEB8F75D8226A0F50310EE15699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
28eb0346af97d4d022826e45263dcb93.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
28eb0346af97d4d022826e45263dcb93.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://���iktomtkkbtkjnZZZZZ:1802792303
-
http://:8089u8/36>u,ktlmukZo{ n
-
http://:8089/build/v1.67/1KJJDNCRYQVA
-
http://31.57.118.104:8089u8/36>u,ktlmukZo{ n
-
http://iktomtkkbtkjnZZZZZ:8089u8/36>u,ktlmukZo{ n
Targets
-
- Target 28eb0346af97d4d022826e45263dcb93.exe
- Size 8KB
- SHA256 5e1d7ed440028b43d375c9ef1c451ae41533ac8db344a0e13d89def501169e8a
- MD5 28eb0346af97d4d022826e45263dcb93
- SHA1 a3be37f3017e676324c67df70a4af2a7d03d0b2d
- SHA512 7b63b107eb25e9c6d1a325d8604ee52abea990ccc8f2e2d0d79974ae293cd174397b4d33ba80fbff49b263f3ff9c2b9400dab87cfa107866d894df34eb15378c
- SSDEEP 96:62y0bsWxx/y61GKFcr5bO9K3Z7JAnobcmHt8/nzxkIO8h7laRqz:Awf3H159K3Z9aoAmKSh6as
- TLSH T10F022CA173F816B7D08B8A707C75A2142533BE50DEFBEB8F75D8226A0F50310EE15699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.