General
- Target 2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza
- Size 267KB
- Sample261101-b41vrsba54
- SHA256 f0ba22723069a37e41d088529295427343717ed2677085dcebe81cb3b055eabb
- MD5 613730b8d4be234c9a1c3a325efd29e2
- SHA1 d341145e025578178acd2a6127f4e388bf1f2566
- SHA512 3e3b00f5b7699a4af072769ec38cb5d35b98d5d08243fa49be76729901f03607dcb1f5747c2dbbda70bb2a6646ac82caba39f1f7f4bd2c85c21717ca3e0c6902
- SSDEEP 6144:TiFR25xnm/5wRhshCE0liyBK89dUBJihdiaTwcd54w1c7qUdTF/p/uwONct43j9B:Tm2i/qTsQlZBgohfDdbc7BT9pGHNu4BB
- TLSH T1A944D11AE7FCDC60CC1264F499F953F3892D95220B6B48E377A82C0E891586EB73536D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
colibri
Version
-
1.2.0
Botnet
-
traffic_doc
C2
-
http://188.130.139.47/gate.php
rc4.plain
Targets
-
- Target 2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza
- Size 267KB
- SHA256 f0ba22723069a37e41d088529295427343717ed2677085dcebe81cb3b055eabb
- MD5 613730b8d4be234c9a1c3a325efd29e2
- SHA1 d341145e025578178acd2a6127f4e388bf1f2566
- SHA512 3e3b00f5b7699a4af072769ec38cb5d35b98d5d08243fa49be76729901f03607dcb1f5747c2dbbda70bb2a6646ac82caba39f1f7f4bd2c85c21717ca3e0c6902
- SSDEEP 6144:TiFR25xnm/5wRhshCE0liyBK89dUBJihdiaTwcd54w1c7qUdTF/p/uwONct43j9B:Tm2i/qTsQlZBgohfDdbc7BT9pGHNu4BB
- TLSH T1A944D11AE7FCDC60CC1264F499F953F3892D95220B6B48E377A82C0E891586EB73536D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10