Resubmissions

20-07-2023 06:12

230720-gyc5eadf7x 10

07-12-2022 01:02

221207-bdw4wsdf7t 10

General

  • Target

    简历.zip

  • Size

    168KB

  • Sample

    221207-bdw4wsdf7t

  • MD5

    f1c56cc405029826cf7a21a1394bf18e

  • SHA1

    1b9080ac30d6fc8963457e90aa9d5e56bb7eace0

  • SHA256

    4e7a06b20666a62613cca9f75ae58a35cfc5d721c05c8b435170a4e8024ba87e

  • SHA512

    31597e85de1b58bfadc88f2b79bc0f7dcaa79d8d63cdb4517cb35f7d99df643ab34b096931af44029e3c16c5ed6a183437009a4dc144c65cbf15034c7c6caa53

  • SSDEEP

    3072:v0qEgiHe4UvUmvUVCn/CudT8opk05O/q9hLLePw/95HMxlvFiqbM9PjX:nQewOv/DqoXQ/q9hvX15HMxl08OjX

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-5r35x0x0-1310046338.gz.apigw.tencentcs.com:443/result_78adc45.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Targets

    • Target

      简历.zip

    • Size

      168KB

    • MD5

      f1c56cc405029826cf7a21a1394bf18e

    • SHA1

      1b9080ac30d6fc8963457e90aa9d5e56bb7eace0

    • SHA256

      4e7a06b20666a62613cca9f75ae58a35cfc5d721c05c8b435170a4e8024ba87e

    • SHA512

      31597e85de1b58bfadc88f2b79bc0f7dcaa79d8d63cdb4517cb35f7d99df643ab34b096931af44029e3c16c5ed6a183437009a4dc144c65cbf15034c7c6caa53

    • SSDEEP

      3072:v0qEgiHe4UvUmvUVCn/CudT8opk05O/q9hLLePw/95HMxlvFiqbM9PjX:nQewOv/DqoXQ/q9hvX15HMxl08OjX

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Discovery

Process Discovery

1
T1057

System Information Discovery

1
T1082

Tasks