General
-
Target
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777
-
Size
202KB
-
Sample
220607-wt1ggafee3
-
MD5
4c8471847ccd4d26e841ce03ecd21348
-
SHA1
c38657fc0702eb24b7b3568c431387d2a3408dae
-
SHA256
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777
-
SHA512
a53ef0fe8dfa1b8f0d1e28d6c00ccbd362b597e5ebee1c3173d3fabc07dbb9a66fe9066abea86cfe5cca74e4fa7af1185b661ad2050fc13f5961fb790e15a4b0
Static task
static1
Behavioral task
behavioral1
Sample
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777.dll
Resource
win10v2004-20220414-en
Malware Config
Extracted
cobaltstrike
1
-
beacon_type
512
-
create_remote_thread
256
-
http_header1
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
http_header2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
pipe_name
\\%s\pipe\msagent_%x
-
polling_time
10000
-
port_number
4444
-
sc_process32
%windir%\syswow64\rundll32.exe
-
sc_process64
%windir%\sysnative\rundll32.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCcLhQA32XEl9RkpaGlsNTNbbBJ4U69l+FzZ+Lf8Q9kLHe3L+yXx7uttkfnSiZmBYP4W0vHjlSs13PHwVdYSnTbyy468UAibjzqopshVUq9Z5w8iDPQXiQIlyxdlU/AjddDSgsXiPAyEIbycnstZ8ORnKuKEbqd1MOdzs8h8JMqdwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
4096
-
unknown2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
watermark
1
Targets
-
-
Target
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777
-
Size
202KB
-
MD5
4c8471847ccd4d26e841ce03ecd21348
-
SHA1
c38657fc0702eb24b7b3568c431387d2a3408dae
-
SHA256
1b98e9ee92f90530743c0e79b9d9d1630c4e43b1241caf8bd13a27f6694f9777
-
SHA512
a53ef0fe8dfa1b8f0d1e28d6c00ccbd362b597e5ebee1c3173d3fabc07dbb9a66fe9066abea86cfe5cca74e4fa7af1185b661ad2050fc13f5961fb790e15a4b0
Score1/10 -