General
-
Target
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601
-
Size
199KB
-
Sample
220701-fp2wqsehe9
-
MD5
6f545dedc1e1c7ed1c43f4a9699e9757
-
SHA1
b3c31a754fcd9c85119529bef983a2366d1814d4
-
SHA256
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601
-
SHA512
d58f3fbcbee53852d4cb86b964a1cc43d57937ad0c624b6ab238ec016c788b1fd3882afc4faba3bec2de05939e5881fca58aa1052d37f19bd6f81ce142136839
Static task
static1
Behavioral task
behavioral1
Sample
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601.dll
Resource
win10v2004-20220414-en
Malware Config
Extracted
cobaltstrike
0
http://185.154.52.140:443/pixel.gif
-
crypto_scheme
256
-
host
185.154.52.140,/pixel.gif
-
http_header1
AAAABwAAAAAAAAADAAAABgAAAAZDb29raWUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
http_header2
AAAACgAAACZDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQAAAAcAAAAAAAAABQAAAAJpZAAAAAcAAAABAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
http_method1
GET
-
http_method2
POST
-
maxdns
255
-
pipe_name
\\%s\pipe\msagent_%x
-
polling_time
60000
-
port_number
443
-
sc_process32
%windir%\syswow64\rundll32.exe
-
sc_process64
%windir%\sysnative\rundll32.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7Nyy5QyTDPm+VFxU1mlaSfXDxp961OtEFOkMombmE+CleuznwM8k3NjX4KiYCZ5K8lkq4ex+iiq0enQjp5pre/Il8UcWkJozqebe2Pk0yevNPOpkO9bUuF0Jzjb5v/Ag4605EkUdF/U0rZ8Wbvg1v2KCCNCSADnWpZ/I4nH9NSwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
4096
-
unknown2
AAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
uri
/submit.php
-
user_agent
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7)
-
watermark
0
Targets
-
-
Target
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601
-
Size
199KB
-
MD5
6f545dedc1e1c7ed1c43f4a9699e9757
-
SHA1
b3c31a754fcd9c85119529bef983a2366d1814d4
-
SHA256
99b43da14ed8102840622b460ca11de57989144f6be2aa078b17df44e5d7a601
-
SHA512
d58f3fbcbee53852d4cb86b964a1cc43d57937ad0c624b6ab238ec016c788b1fd3882afc4faba3bec2de05939e5881fca58aa1052d37f19bd6f81ce142136839
Score3/10 -