General
- Target 2026-11-02_5f0191b3e1b7df4dd11d0611e87cd0cb_cobalt-strike_coinminer
- Size 2.7MB
- Sample261103-krml2stx8m
- SHA256 0dd395ef30f8787f005498b1f58f5530e586e2f865e64ec32013c9158d05431f
- MD5 5f0191b3e1b7df4dd11d0611e87cd0cb
- SHA1 1cc22e9102324b29f4a531361e5dbe562dd41538
- SHA512 56c2c47d3789c2b0cc4a2b5a81f09d53c09f96b3acb4fc83fe63aacd66c71b12da4961ff97cc3c955cb70d30532c3ae28f1c61e4f3330bc306e1afa1d392c52d
- SSDEEP 49152:zsCpBnKsSUcPWxpBxPUL5tYmYVAdr508rZrM:IoBnKScexfMYmYVAdN08rh
- TLSH T13AD57C12FCE518F6C9B9F23085A19251BA72786903327BD71F84967E2A66FD06F3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_5f0191b3e1b7df4dd11d0611e87cd0cb_cobalt-strike_coinminer.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_5f0191b3e1b7df4dd11d0611e87cd0cb_cobalt-strike_coinminer.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.37.128:4444
Targets
-
- Target 2026-11-02_5f0191b3e1b7df4dd11d0611e87cd0cb_cobalt-strike_coinminer
- Size 2.7MB
- SHA256 0dd395ef30f8787f005498b1f58f5530e586e2f865e64ec32013c9158d05431f
- MD5 5f0191b3e1b7df4dd11d0611e87cd0cb
- SHA1 1cc22e9102324b29f4a531361e5dbe562dd41538
- SHA512 56c2c47d3789c2b0cc4a2b5a81f09d53c09f96b3acb4fc83fe63aacd66c71b12da4961ff97cc3c955cb70d30532c3ae28f1c61e4f3330bc306e1afa1d392c52d
- SSDEEP 49152:zsCpBnKsSUcPWxpBxPUL5tYmYVAdr508rZrM:IoBnKScexfMYmYVAdN08rh
- TLSH T13AD57C12FCE518F6C9B9F23085A19251BA72786903327BD71F84967E2A66FD06F3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE