General

  • Target

    2b06e5a59feeafa3d75239fd0ade197eaede91209c24950ffea1a89ae5bd3877

  • Size

    206KB

  • Sample

    201115-l3xjl3lld2

  • MD5

    c70b84a85cb5f921b3ade9c7e2715bcf

  • SHA1

    e17ea5f874c5e8bfd90d2fcd96fb7dfd48c4a0f5

  • SHA256

    2b06e5a59feeafa3d75239fd0ade197eaede91209c24950ffea1a89ae5bd3877

  • SHA512

    1281e8cc8c66c34f7e9f34b3fc52531dda58c51af7ad8ef4fa52142f7289878e3d567c2fc146d9f2d942c2819d2dc2d7d68a6f6512b98cb3240d13a2d39b91db

Malware Config

Targets

    • Target

      2b06e5a59feeafa3d75239fd0ade197eaede91209c24950ffea1a89ae5bd3877

    • Size

      206KB

    • MD5

      c70b84a85cb5f921b3ade9c7e2715bcf

    • SHA1

      e17ea5f874c5e8bfd90d2fcd96fb7dfd48c4a0f5

    • SHA256

      2b06e5a59feeafa3d75239fd0ade197eaede91209c24950ffea1a89ae5bd3877

    • SHA512

      1281e8cc8c66c34f7e9f34b3fc52531dda58c51af7ad8ef4fa52142f7289878e3d567c2fc146d9f2d942c2819d2dc2d7d68a6f6512b98cb3240d13a2d39b91db

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

MITRE ATT&CK Matrix

Tasks