General
- Target eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47.exe
- Size 7.7MB
- Sample261102-q1vxnsfc45
- SHA256 eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47
- MD5 83be5b97a3163ee4dee147442cb4a0cb
- SHA1 068ec6253323b012b1cec3208ac310d6c690c747
- SHA512 2f456d01065522a1ddabd380d23a89626d24888773ad02e75607d83e7bbe9ae8ec7099c514c2c1df09a23d9022b70633668b48123ee49871aa0624a5dad07a7d
- SSDEEP 196608:hdUVV1W903eV4Q2tpDjIIAcwDeSEDRP0vvk9LIL:kFW+eGQi9jorghk
- TLSH T154863390E2D45EE5EDB7853FCED5000AE632B9320B78C69B8BB4A2521F33385593E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://141.98.197.31:7785/AieN
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)
Targets
-
- Target eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47.exe
- Size 7.7MB
- SHA256 eecc57d6e9964204bf5dd738aa42d8a7aa7615700daff2d00ad8029c3b2e1e47
- MD5 83be5b97a3163ee4dee147442cb4a0cb
- SHA1 068ec6253323b012b1cec3208ac310d6c690c747
- SHA512 2f456d01065522a1ddabd380d23a89626d24888773ad02e75607d83e7bbe9ae8ec7099c514c2c1df09a23d9022b70633668b48123ee49871aa0624a5dad07a7d
- SSDEEP 196608:hdUVV1W903eV4Q2tpDjIIAcwDeSEDRP0vvk9LIL:kFW+eGQi9jorghk
- TLSH T154863390E2D45EE5EDB7853FCED5000AE632B9320B78C69B8BB4A2521F33385593E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Loads dropped DLL