General
- Target f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c
- Size 18KB
- Sample261107-japveawzbv
- SHA256 f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c
- MD5 4ead2ba518c812ffed3af3feb661c16f
- SHA1 1fd9217e3c0d51fec33ed5c100a0d1b86fb42c0d
- SHA512 6ffe681acc4f0a0a15f9d451097aecbfec226fd77be513c2aaa7ed01ba6b795a5d2a263f5b09780eb0ad20499dc93c4fa6a12cff11376096e1d16175002b4c9b
- SSDEEP 192:eMrhlHby/iw6nscOtDbLZ7CWE8Qrcfkw0mejT8P56a43ybjcPoKxe3Q5tfMKg:ZHb4J70rlI8wjU8aAjczY3p
- TLSH T12482183EF44454E5D1D1B079C9BD938AEC22331EFF39924BE372182705A39E98A15EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.56.102:8090/HMrV
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)
Targets
-
- Target f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c
- Size 18KB
- SHA256 f6b3719ec0cf1d5da49efe7401ded9a0c2ba255d629e6cbd17c1962965b2719c
- MD5 4ead2ba518c812ffed3af3feb661c16f
- SHA1 1fd9217e3c0d51fec33ed5c100a0d1b86fb42c0d
- SHA512 6ffe681acc4f0a0a15f9d451097aecbfec226fd77be513c2aaa7ed01ba6b795a5d2a263f5b09780eb0ad20499dc93c4fa6a12cff11376096e1d16175002b4c9b
- SSDEEP 192:eMrhlHby/iw6nscOtDbLZ7CWE8Qrcfkw0mejT8P56a43ybjcPoKxe3Q5tfMKg:ZHb4J70rlI8wjU8aAjczY3p
- TLSH T12482183EF44454E5D1D1B079C9BD938AEC22331EFF39924BE372182705A39E98A15EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.