Overview

overview

10

Static

static

3

e40fa8022f...f0.exe

windows7-x64

10

e40fa8022f...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e40fa8022f3c0fbd0a82c7301fd663598e565a79b66d394f8edb898ca27e83f0

  • Size

    3.4MB

  • Sample

    240308-ypxacseh36

  • MD5

    0d9128b693ef7fb3750886e60ee8a1d2

  • SHA1

    2b493d9571055fa7b1d353446aa9098f3dff6533

  • SHA256

    e40fa8022f3c0fbd0a82c7301fd663598e565a79b66d394f8edb898ca27e83f0

  • SHA512

    bbe089b2ae3be57eac417fed11ac255cae55722a2c24fffab78c445a2e16e6705805e4b40dab3ca441f599d0ef766b2664811c6ae154e7deb4e2a0bd15efb979

  • SSDEEP

    49152:AutkChTqNoDFSOt+VNrjd5EDooJpXnNGtq4fLMiMmEW:xkaTlSOt+zEkR4iMmh

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-a0y8baw1-1319935181.bj.apigw.tencentcs.com:443/bootstrap-2.min.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 7.0; InfoPath.3; .NET CLR 3.1.40767; Trident/6.0; en-IN)

Targets

    • Target

      e40fa8022f3c0fbd0a82c7301fd663598e565a79b66d394f8edb898ca27e83f0

    • Size

      3.4MB

    • MD5

      0d9128b693ef7fb3750886e60ee8a1d2

    • SHA1

      2b493d9571055fa7b1d353446aa9098f3dff6533

    • SHA256

      e40fa8022f3c0fbd0a82c7301fd663598e565a79b66d394f8edb898ca27e83f0

    • SHA512

      bbe089b2ae3be57eac417fed11ac255cae55722a2c24fffab78c445a2e16e6705805e4b40dab3ca441f599d0ef766b2664811c6ae154e7deb4e2a0bd15efb979

    • SSDEEP

      49152:AutkChTqNoDFSOt+VNrjd5EDooJpXnNGtq4fLMiMmEW:xkaTlSOt+zEkR4iMmh

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks