General

  • Target

    2224540x00000000001300000.dmp

  • Size

    4KB

  • MD5

    679c0bcbe2068e824f94487180064c6c

  • SHA1

    9d94ad9d796c0162ac6d632cf534158ab982cc9b

  • SHA256

    d0368b5b69969fd25e1c84ea450c802e8a613838d108c849efcfd57ebf619ec2

  • SHA512

    cdde38a412a3697dbb2eae71673a687e230c87027ec60da54300aef4f4a0bea9f2e4beec416c1e2afd669b6f6db414132fe2060ae55ca4296ef51275e9773999

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.138.198.123:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Host: www.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 Edg/105.0.1343.33 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: zh-CN,zh;q=0.9 Accept-Encoding: gzip, deflate

Signatures

Files

  • 2224540x00000000001300000.dmp