General
- Target 2026-10-22_35a48eb6659c812d12c31daf40f9e3e8_cobalt-strike_conti
- Size 374KB
- Sample261024-vewpasvzet
- SHA256 2bcf9ec7d5c11c7a2986f2496d6be7485ea3b3a45e603959be4855c64a023427
- MD5 35a48eb6659c812d12c31daf40f9e3e8
- SHA1 b37928639a85bed3dc2e6b44542dd91f9fd3ce46
- SHA512 8153c07aac916ec6fc439babdb3079c18b3208192d7c7db89a3a0ad6d2d005e0dd3b506d062d5e5bed7a741abd73ac7ddedafbd8d1fb5cb41a1e6038df4193d1
- SSDEEP 3072:ipXaKK6ihrlBWA8G2HqHCXWSXeYtc1cYErCFQyJen3nQLmOAmki38v9rcuWvYFBG:IRKRhrlBX8WnIhYEuJmOB3aWvYFBlo91
- TLSH T1E0843B9AFBC0ACEBD61403358DEB4355373AF6D417579B172A28A2301E47EE0FE86245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_35a48eb6659c812d12c31daf40f9e3e8_cobalt-strike_conti.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_35a48eb6659c812d12c31daf40f9e3e8_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://42.193.236.196:8012/UJyE
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENAU)
Targets
-
- Target 2026-10-22_35a48eb6659c812d12c31daf40f9e3e8_cobalt-strike_conti
- Size 374KB
- SHA256 2bcf9ec7d5c11c7a2986f2496d6be7485ea3b3a45e603959be4855c64a023427
- MD5 35a48eb6659c812d12c31daf40f9e3e8
- SHA1 b37928639a85bed3dc2e6b44542dd91f9fd3ce46
- SHA512 8153c07aac916ec6fc439babdb3079c18b3208192d7c7db89a3a0ad6d2d005e0dd3b506d062d5e5bed7a741abd73ac7ddedafbd8d1fb5cb41a1e6038df4193d1
- SSDEEP 3072:ipXaKK6ihrlBWA8G2HqHCXWSXeYtc1cYErCFQyJen3nQLmOAmki38v9rcuWvYFBG:IRKRhrlBX8WnIhYEuJmOB3aWvYFBlo91
- TLSH T1E0843B9AFBC0ACEBD61403358DEB4355373AF6D417579B172A28A2301E47EE0FE86245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.