General

  • Target
    2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza
  • Size 267KB
  • Sample261101-b41vrsba54
  • SHA256 f0ba22723069a37e41d088529295427343717ed2677085dcebe81cb3b055eabb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • colibri

Version
  • 1.2.0

Botnet
  • traffic_doc

C2
  • http://188.130.139.47/gate.php

rc4.plain

Targets

    • Target
      2026-10-30_613730b8d4be234c9a1c3a325efd29e2_elex_mespinoza
    • Size 267KB
    • SHA256 f0ba22723069a37e41d088529295427343717ed2677085dcebe81cb3b055eabb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Colibri Loader

      A loader sold as MaaS first seen in August 2021.

MITRE ATT&CK Enterprise v16

Tasks