General

  • Target

    a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f

  • Size

    191KB

  • Sample

    220128-r718psehgm

  • MD5

    b50f30c551998532617a9b652af4d4b5

  • SHA1

    a212808f1a9a45cdb2c4eb6284e284a94168e83f

  • SHA256

    a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f

  • SHA512

    afa9114f191af3da6ba5f4d4048d579aefd42cf81c4be07d7c9df38b81d89d76aba99e4906ac3eb1ed5c11b4d79d8f02a9fdc1cbb8a9a61ae0421a5c74408a06

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • beacon_type

    512

  • http_header1

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • http_header2

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • pipe_name

    \\%s\pipe\msagent_%x

  • polling_time

    10000

  • port_number

    4444

  • state_machine

    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKiNJvGYssAnuD7orBaIZ2h94kor5asQ4vQ3bRVmXoLqPHSjJoVq/zk4B3tWL6YvrJJBH/DsVeAx1Uc9pRfB87ihkmiKR2ieqSIqDjlugHp0PCPExY3TM3xSQFN5swQ94JpF0u8gdv6cVhzg8zlMes46QIDfbFEj68F/oYuBHkcwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • unknown1

    4096

  • unknown2

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • watermark

    0

Targets

    • Target

      a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f

    • Size

      191KB

    • MD5

      b50f30c551998532617a9b652af4d4b5

    • SHA1

      a212808f1a9a45cdb2c4eb6284e284a94168e83f

    • SHA256

      a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f

    • SHA512

      afa9114f191af3da6ba5f4d4048d579aefd42cf81c4be07d7c9df38b81d89d76aba99e4906ac3eb1ed5c11b4d79d8f02a9fdc1cbb8a9a61ae0421a5c74408a06

    Score
    3/10

MITRE ATT&CK Matrix

Tasks