Overview

overview

10

Static

static

fc4196b355...c5.exe

windows7-x64

10

fc4196b355...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc4196b355e1c160a641b5a72ca5ad8d264efd8aee610680f28f0b3fe15364c5

  • Size

    4.3MB

  • Sample

    220802-eaqpgsagar

  • MD5

    e220b18c399874daf3278c56803e4885

  • SHA1

    c0ec811fd2cc339f54dbe7e7663b9d4b34bc0033

  • SHA256

    fc4196b355e1c160a641b5a72ca5ad8d264efd8aee610680f28f0b3fe15364c5

  • SHA512

    45c32ad20842e092c3aded0e1df0e199e2dbf44d60daf809a8511903a2826dfd44b79d650673d97b12377bfaf2708e87d2bbc5e6ccf83afa287b6c4341854ccf

Score
10/10
cobaltstrike520backdoortrojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

520

C2

http://162.14.69.24:804/box-static/disk-header/headers/img/logo.png

Attributes
  • access_type

    512

  • host

    162.14.69.24,/box-static/disk-header/headers/img/logo.png

  • http_header1

    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

  • http_header2

    AAAACgAAAAtBY2NlcHQ6ICovKgAAAAoAAAAWQ29udGVudC1UeXBlOiB0ZXh0L3htbAAAAAoAAAAgWC1SZXF1ZXN0ZWQtV2l0aDogWE1MSHR0cFJlcXVlc3QAAAAHAAAAAAAAAAUAAAACc24AAAAHAAAAAQAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=

  • http_method1

    GET

  • http_method2

    POST

  • jitter

    7680

  • polling_time

    2000

  • port_number

    804

  • sc_process32

    %SystemDrive%\Program Files (x86)\Internet Explorer\iexplore.exe

  • sc_process64

    %SystemDrive%\Program Files\Internet Explorer\iexplore.exe

  • state_machine

    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCMQ39KG9JsMQlm+XrgjayjtZw1S7Pk8C+O38MAqc7xChxyvV7QMPx1GzZwp43nq5kwcf0EP8zfKvSl5IlVs+/uIa4QI17Yi1D92QdV1LaTXxUKtehibwJyNmZcQ0ffXOnqPre5Pe98HMDVbo5ZEJBrkZJNWcI/f3B6a6qS+dFatwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • unknown1

    1.34221824e+08

  • unknown2

    AAAABAAAAAIAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • uri

    /searchs/index

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36

  • watermark

    520

Targets

    • Target

      fc4196b355e1c160a641b5a72ca5ad8d264efd8aee610680f28f0b3fe15364c5

    • Size

      4.3MB

    • MD5

      e220b18c399874daf3278c56803e4885

    • SHA1

      c0ec811fd2cc339f54dbe7e7663b9d4b34bc0033

    • SHA256

      fc4196b355e1c160a641b5a72ca5ad8d264efd8aee610680f28f0b3fe15364c5

    • SHA512

      45c32ad20842e092c3aded0e1df0e199e2dbf44d60daf809a8511903a2826dfd44b79d650673d97b12377bfaf2708e87d2bbc5e6ccf83afa287b6c4341854ccf

    Score
    10/10
    cobaltstrike520backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks