Overview

overview

10

Static

static

3

77c037c3ab...cf.exe

windows7-x64

10

77c037c3ab...cf.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77c037c3ab7755ee2e4fcfeea207d6086e25a5c0b57b15f98ea7f1251f888acf

  • Size

    315KB

  • Sample

    230602-pd6j8abf6x

  • MD5

    cf0bb5a0bc59a0d74bc7eacfdfaa6657

  • SHA1

    88ae51aff13f4aedc28a5ec0fa52b4d299d1d45e

  • SHA256

    77c037c3ab7755ee2e4fcfeea207d6086e25a5c0b57b15f98ea7f1251f888acf

  • SHA512

    1184d52f02f4042547a18a2db785cf63700267bf08a6dfe4540ebbd4c55b4197bd233d7c2c7a3a34c8a8bdab18d0fbe896229979020aff99962b3c95da9927d4

  • SSDEEP

    3072:xFEUOdh/LBNnx3kIxiduqPAWbfFY0P7doHsFw:xF3Odh/LBNnx9iTAOnTdoMF

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.20.50.117:443/webassets/visitorAPI-idsync.js

Attributes
  • user_agent

    Accept: */* Accept-Language: zh-CN,zh;q=0.9 Host: eduv2.msftedu.com Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br sec-ch-ua: Google Chrome";v="111", "Not(A:Brand";v="8", "Chromium";v="111 User-Agent: user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

Targets

    • Target

      77c037c3ab7755ee2e4fcfeea207d6086e25a5c0b57b15f98ea7f1251f888acf

    • Size

      315KB

    • MD5

      cf0bb5a0bc59a0d74bc7eacfdfaa6657

    • SHA1

      88ae51aff13f4aedc28a5ec0fa52b4d299d1d45e

    • SHA256

      77c037c3ab7755ee2e4fcfeea207d6086e25a5c0b57b15f98ea7f1251f888acf

    • SHA512

      1184d52f02f4042547a18a2db785cf63700267bf08a6dfe4540ebbd4c55b4197bd233d7c2c7a3a34c8a8bdab18d0fbe896229979020aff99962b3c95da9927d4

    • SSDEEP

      3072:xFEUOdh/LBNnx3kIxiduqPAWbfFY0P7doHsFw:xF3Odh/LBNnx9iTAOnTdoMF

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks