General

  • Target

    a.exe

  • Size

    582KB

  • Sample

    220704-hdrmqshbd5

  • MD5

    9e2c51bf73faf49d7bac7000d8212fea

  • SHA1

    2626c3ddcf66211658af796d81303008701a5134

  • SHA256

    6818881fa2f414dd471e2bbbd5d0321c94e66089737a603f6dc55d6f38b2f487

  • SHA512

    9fc7ca40140562c7632a3b963d1853564cb35b20e1134c3f9cd449a3282db14c3c1affa307ef4c192899d6256652b3e7da93b633b68a89293a3cd403bdfc3023

Malware Config

Targets

    • Target

      a.exe

    • Size

      582KB

    • MD5

      9e2c51bf73faf49d7bac7000d8212fea

    • SHA1

      2626c3ddcf66211658af796d81303008701a5134

    • SHA256

      6818881fa2f414dd471e2bbbd5d0321c94e66089737a603f6dc55d6f38b2f487

    • SHA512

      9fc7ca40140562c7632a3b963d1853564cb35b20e1134c3f9cd449a3282db14c3c1affa307ef4c192899d6256652b3e7da93b633b68a89293a3cd403bdfc3023

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Tasks