General
- Target 0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a
- Size 1.1MB
- Sample240225-nph3maae96
- SHA256 0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a
- MD5 9d2fae1f1a4f044e01f423a39d163027
- SHA1 060796c9622c0015930b601939ba4842173fa067
- SHA512 0d0d922b395f0f0afeb5063a8049faef3c0e32481eff3452841370a2d2e0fc82f84798346752ea679c23ca75871d21ea5e72542be20b0f352fc2392eea4b2ae0
- SSDEEP 12288:K27q8BViDLj2nIccHu+TR/gvpQW7GzBI2Xf/7Vh:KHl/2ngBR8p3uF3Jh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a.exe
Resource
win10v2004-20240221-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://update.office-oa.org:8443/api/2
Attributes
-
user_agent
Host: update.office-oa.org User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)
Targets
-
- Target 0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a
- Size 1.1MB
- SHA256 0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a
- MD5 9d2fae1f1a4f044e01f423a39d163027
- SHA1 060796c9622c0015930b601939ba4842173fa067
- SHA512 0d0d922b395f0f0afeb5063a8049faef3c0e32481eff3452841370a2d2e0fc82f84798346752ea679c23ca75871d21ea5e72542be20b0f352fc2392eea4b2ae0
- SSDEEP 12288:K27q8BViDLj2nIccHu+TR/gvpQW7GzBI2Xf/7Vh:KHl/2ngBR8p3uF3Jh
- MD5 SHA1 SHA512 SSDEEP
Score1/10