General
- Target aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e
- Size 1.8MB
- Sample261105-y8tctadv2y
- SHA256 aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e
- MD5 98c38629b84cd6c33499284f84a86b15
- SHA1 202d2999f2cb9f80c7163f3f31a52f2af118d292
- SHA512 632b4dcfb11c3d237cfda21f94a6b18da5a1951994af053c10cc2520fff6bd794b373ea1f4aeb048e21c72546bc9745c0f3c590f6fe35da96ddb08867534b8ea
- SSDEEP 49152:IpjnPS/JldAJXO2qvK6UToHeJKj2yY6+:iPS/RAsK1l8
- TLSH T10D852A8B8D4A8F38B25F603C736F7E4C9035F906BB01ECAD544E5A603AB956FC90A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.56.102:8090/HMrV
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)
Targets
-
- Target aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e
- Size 1.8MB
- SHA256 aef0cd9508a17e413d2ef2f235cac49d9825044bce65dc99f0d5d86b78d5849e
- MD5 98c38629b84cd6c33499284f84a86b15
- SHA1 202d2999f2cb9f80c7163f3f31a52f2af118d292
- SHA512 632b4dcfb11c3d237cfda21f94a6b18da5a1951994af053c10cc2520fff6bd794b373ea1f4aeb048e21c72546bc9745c0f3c590f6fe35da96ddb08867534b8ea
- SSDEEP 49152:IpjnPS/JldAJXO2qvK6UToHeJKj2yY6+:iPS/RAsK1l8
- TLSH T10D852A8B8D4A8F38B25F603C736F7E4C9035F906BB01ECAD544E5A603AB956FC90A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.