General

  • Target

    4d20d47b8bb612fad459a7d21197b326.bin

  • Size

    8KB

  • MD5

    4d20d47b8bb612fad459a7d21197b326

  • SHA1

    667b551e2d243b5a7cbefbc76ad92d1594771159

  • SHA256

    5bdb79085ea952ced7d9a7746fe4db67e7dc5d0c9d1a56cd3d1057fd7c9b793e

  • SHA512

    0246997be34d99949407ff2ab9e5995ed22a71ad83b47383921079d0d2694aaa95cc4ee2efe2925618ece46265e6cc81f0cf21e6b64d9292c6192ebfbf8e8feb

  • SSDEEP

    96:c7y/38rVnzL+fyXcpy9dPhVyXKVq4dlXja2m29ODobA5JFHgTrCRMl0F+Rx7Guhp:cnr/RPjTz0JFHmhjRxaul9

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.138.221.139:80/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-response content-transfer-encoding: binary Server: NetDNA-cache/2.2 User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0.0)

Signatures

Files

  • 4d20d47b8bb612fad459a7d21197b326.bin