General
-
Target
4d20d47b8bb612fad459a7d21197b326.bin
-
Size
8KB
-
MD5
4d20d47b8bb612fad459a7d21197b326
-
SHA1
667b551e2d243b5a7cbefbc76ad92d1594771159
-
SHA256
5bdb79085ea952ced7d9a7746fe4db67e7dc5d0c9d1a56cd3d1057fd7c9b793e
-
SHA512
0246997be34d99949407ff2ab9e5995ed22a71ad83b47383921079d0d2694aaa95cc4ee2efe2925618ece46265e6cc81f0cf21e6b64d9292c6192ebfbf8e8feb
-
SSDEEP
96:c7y/38rVnzL+fyXcpy9dPhVyXKVq4dlXja2m29ODobA5JFHgTrCRMl0F+Rx7Guhp:cnr/RPjTz0JFHmhjRxaul9
Malware Config
Extracted
cobaltstrike
http://43.138.221.139:80/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-response content-transfer-encoding: binary Server: NetDNA-cache/2.2 User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0.0)
Signatures
-
Cobaltstrike family
Files
-
4d20d47b8bb612fad459a7d21197b326.bin