General

  • Target

    ef2d84321d6830cb2c6675b1c054a6d1b00f525f8f4e6936f68d20edf0ddd79f

  • Size

    78KB

  • MD5

    279901faf12d9a64427e5e6b0861d35e

  • SHA1

    0d056433b0702374001edf96017b157a72b85d32

  • SHA256

    ef2d84321d6830cb2c6675b1c054a6d1b00f525f8f4e6936f68d20edf0ddd79f

  • SHA512

    73738f90c3d3806a9434d7d5710895c82cc63dda5b7c8602b9ea58bfcb4594df91522da9ab6df156ef44813274b5b55fe5ed6634898e8229cb4b42690602111d

  • SSDEEP

    768:TLqOI5iap35ziziFIo+++zwxw5s1liP1zumTUJZJ624JYNQFjIONiyktbiwXjJn4:TFi9QjL0iNDTyZ42Qp3NPkViwXFn5wX

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-k6yk2iw7-1256639881.sh.apigw.tencentcs.com:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; WOW64; MSIE 10.0; Windows NT 6.2)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef2d84321d6830cb2c6675b1c054a6d1b00f525f8f4e6936f68d20edf0ddd79f
    .exe windows:6 windows x64

    00d07876ff59990c6da70f4050dab190


    Headers

    Imports

    Sections