Overview

overview

10

Static

static

gwui.dll

windows7_x64

10

gwui.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    gwui.dll
  • Size 211KB
  • Sample220208-11v8jsffhq
  • SHA256 b6262f4aa06d0bf045d95e3fcbc142f1d1d98f053da5714e3570482f0cf93b65
  • MD5 SHA1 SHA512
Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

  • cobaltstrike

C2

  • http://foxofeli.com:443/image-directory/dhl.jpg

Attributes
  • user_agent

    Host: weibo.com Connection: close Accept-Language: fr-CH, fr;q=0.9, en;q=0.8, de;q=0.7, *;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9

Targets

    • Target
      gwui.dll
    • Size 211KB
    • SHA256 b6262f4aa06d0bf045d95e3fcbc142f1d1d98f053da5714e3570482f0cf93b65
    • MD5 SHA1 SHA512
    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks