General
- Target 2026-11-01_d34c21807053288f9fde825eae6af4fd_cobalt-strike_conti
- Size 22KB
- Sample261102-jkjfdaee22
- SHA256 b66b71bd663a8027849facc973cbbf663de02ab590b3fa1d8dc609b3cd37717c
- MD5 d34c21807053288f9fde825eae6af4fd
- SHA1 2901ec6c00cd487c93108226fa598fe3a63241fb
- SHA512 47f7d852eaf629d7998bf5a621489881f223de4d4ace842958f1ad813cfb7cc4e1ae11a0ae9cecf553f8e595b842b62f176d25b7d77afafd93668b2fc17d411d
- SSDEEP 384:1ERvGzWHFW2xGFqpjDDWSoFRllllt+yT1GhvutCW:1AGd2tjDtI+VW
- TLSH T1AAA20A1FB79BA4F8C94AE27882FBA731D1727C300A65673E139CE3705E11C906BE9506
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_d34c21807053288f9fde825eae6af4fd_cobalt-strike_conti.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_d34c21807053288f9fde825eae6af4fd_cobalt-strike_conti.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://180.76.140.136:443/GbaS
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target 2026-11-01_d34c21807053288f9fde825eae6af4fd_cobalt-strike_conti
- Size 22KB
- SHA256 b66b71bd663a8027849facc973cbbf663de02ab590b3fa1d8dc609b3cd37717c
- MD5 d34c21807053288f9fde825eae6af4fd
- SHA1 2901ec6c00cd487c93108226fa598fe3a63241fb
- SHA512 47f7d852eaf629d7998bf5a621489881f223de4d4ace842958f1ad813cfb7cc4e1ae11a0ae9cecf553f8e595b842b62f176d25b7d77afafd93668b2fc17d411d
- SSDEEP 384:1ERvGzWHFW2xGFqpjDDWSoFRllllt+yT1GhvutCW:1AGd2tjDtI+VW
- TLSH T1AAA20A1FB79BA4F8C94AE27882FBA731D1727C300A65673E139CE3705E11C906BE9506
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.