General
- Target 2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446
- Size 22KB
- Sample261102-jgqehs1yax
- SHA256 2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446
- MD5 31a83812ab95e583f09a390eb0724898
- SHA1 df08cb4b3f39056ac108a48f4a64d85f8988c949
- SHA512 ff071f9e3ec57166fa3e5088dfdc5e6ad4e72073d37d1f221b4382e0c3a5577c9be2273632d959ba179019c66c9f800b8078b45c422836854c999d3471fd3862
- SSDEEP 384:s16yfgcgV1tq0fXZqVWSoF1zToYoGFhvuKCW:dy3g1lBqXc/jhkW
- TLSH T1FFA21C5FB39BE4F8C906E27882FB9B3191717C300A666B3D13D8E3712E10C905AF9546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://180.76.140.136:443/GbaS
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target 2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446
- Size 22KB
- SHA256 2c16de87b9029f1fddbf97d1b67539477af034a53dfeb90b9b985b891ec02446
- MD5 31a83812ab95e583f09a390eb0724898
- SHA1 df08cb4b3f39056ac108a48f4a64d85f8988c949
- SHA512 ff071f9e3ec57166fa3e5088dfdc5e6ad4e72073d37d1f221b4382e0c3a5577c9be2273632d959ba179019c66c9f800b8078b45c422836854c999d3471fd3862
- SSDEEP 384:s16yfgcgV1tq0fXZqVWSoF1zToYoGFhvuKCW:dy3g1lBqXc/jhkW
- TLSH T1FFA21C5FB39BE4F8C906E27882FB9B3191717C300A666B3D13D8E3712E10C905AF9546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.