Overview

overview

10

Static

static

spot.dll

windows7_x64

10

spot.dll

windows10_x64

10

Resubmissions

27/08/2021, 12:04

210827-hvy113ngfa10

30/07/2021, 20:47

210730-t1tsaf1b7j10

Sharing

Copy URL Twitter E-mail

General

  • Target
    spot.dll
  • Size 166KB
  • Sample210730-t1tsaf1b7j
  • SHA256 1672ce53464329f5bd8d8039606f782d4958fa5541932e2b1726bdcedc0b0d88
  • MD5 SHA1 SHA512
Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

  • cobaltstrike

C2

  • http://spotver.com:443/components/case.mp3

Attributes
  • user_agent

    Host: mail.ru Connection: close Accept: image/jpeg User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0

Targets

    • Target
      spot.dll
    • Size 166KB
    • SHA256 1672ce53464329f5bd8d8039606f782d4958fa5541932e2b1726bdcedc0b0d88
    • MD5 SHA1 SHA512
    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks