General
- Target 0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132
- Size 602KB
- Sample261108-kl32vaa14y
- SHA256 0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132
- MD5 93492b057c50464c6f392e2ae510f782
- SHA1 f2685edbc1bc5243c29842f5c83c96b1e0abfe06
- SHA512 617b331e5977df1d35027bda0e8a50a7c4ee6fcac3d210a5e0d95f40c43c1c2462fc4ecc8898605d2d8478207375464cf0eb09cf981d60c84a7d0b4ddd64457a
- SSDEEP 12288:CIwOKM1mcnUKwGHtbqq/nz+iBs4LB/g6bLivlppyASoeavLcL8:CRM1mVKblrx/mSV8
- TLSH T14DD43A8B8D4A8F38F24F603C375F7E4C9032F909BB41ACAD654D5A6039B956F8A1B750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.56.102:8090/HMrV
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)
Targets
-
- Target 0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132
- Size 602KB
- SHA256 0783c3ae2e308c2cd03c6663c0f81775010a1563b449b4ccdfcc3b87b95cb132
- MD5 93492b057c50464c6f392e2ae510f782
- SHA1 f2685edbc1bc5243c29842f5c83c96b1e0abfe06
- SHA512 617b331e5977df1d35027bda0e8a50a7c4ee6fcac3d210a5e0d95f40c43c1c2462fc4ecc8898605d2d8478207375464cf0eb09cf981d60c84a7d0b4ddd64457a
- SSDEEP 12288:CIwOKM1mcnUKwGHtbqq/nz+iBs4LB/g6bLivlppyASoeavLcL8:CRM1mVKblrx/mSV8
- TLSH T14DD43A8B8D4A8F38F24F603C375F7E4C9032F909BB41ACAD654D5A6039B956F8A1B750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.