General

  • Target
    Microsofttool.exe
  • Size 328KB
  • Sample210424-72ng648tye
  • SHA256 6f7d0ca8354db2dd7ba0d0ebba56c1d221604a849f4d040c6fc3ce3035c71a95
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • cobaltstrike

C2
  • http://42.194.183.201:80/NmXJ

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)

Targets

    • Target
      Microsofttool.exe
    • Size 328KB
    • SHA256 6f7d0ca8354db2dd7ba0d0ebba56c1d221604a849f4d040c6fc3ce3035c71a95
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks