General

  • Target

    agent.7z

  • Size

    321KB

  • Sample

    220704-hrx2nsfbcl

  • MD5

    c5f3a6e284dcaff54fb9b51c73fdba4b

  • SHA1

    656944938bda292f87e6d97f79621bf72fdfe817

  • SHA256

    bd495e5a0132322ec6bf10295e2676b563a469fb2551379eab5fc1786b581d00

  • SHA512

    c0c8344dc53697419ef3ac737a17061f935ca0d4f2b5d3c4b11c967efea7232c4d993603371bf830b16b9758f3c2bb39b3219a502975fe5ceb4a44de09c012f6

Malware Config

Targets

    • Target

      agent??/agent??.exe

    • Size

      582KB

    • MD5

      9e2c51bf73faf49d7bac7000d8212fea

    • SHA1

      2626c3ddcf66211658af796d81303008701a5134

    • SHA256

      6818881fa2f414dd471e2bbbd5d0321c94e66089737a603f6dc55d6f38b2f487

    • SHA512

      9fc7ca40140562c7632a3b963d1853564cb35b20e1134c3f9cd449a3282db14c3c1affa307ef4c192899d6256652b3e7da93b633b68a89293a3cd403bdfc3023

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

MITRE ATT&CK Matrix

Tasks