cobaltstrike | f1b51ce9a96ca232f44fced9dbfa19ee91cb9992ff9151e24908f50dcd19d176 | Triage

Sharing

General

Target

f1b51ce9a96ca232f44fced9dbfa19ee91cb9992ff9151e24908f50dcd19d176
Size

1.9MB
Sample

240416-h1n55adh5v
MD5

a1e431f3f0c4d20c7bdcb5891d1d3401
SHA1

7c48ea57234326e13e95b3d6dcb07f92fa27b9d3
SHA256

f1b51ce9a96ca232f44fced9dbfa19ee91cb9992ff9151e24908f50dcd19d176
SHA512

0c744d81ddec96961d481e2539a2605242e0c07c81c46ff910fde4cc9cbd01bf7b4c601a3d4f149a30b316b66980f5485864686f358093f217abbea2ce284f13
SSDEEP

24576:3G04OijL+Kx5SeJLUKv5OnHI+rGnZHMw+x5Sb2z4RjixjML9Ka0B:3G0pijL+Kx5SeJLUChdBG5SN+MKaE

Score

10^/10

cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://41.216.183.117:34213/jquery-3.3.2.slim.min.js

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  f1b51ce9a96ca232f44fced9dbfa19ee91cb9992ff9151e24908f50dcd19d176
- Size
  
  1.9MB
- MD5
  
  a1e431f3f0c4d20c7bdcb5891d1d3401
- SHA1
  
  7c48ea57234326e13e95b3d6dcb07f92fa27b9d3
- SHA256
  
  f1b51ce9a96ca232f44fced9dbfa19ee91cb9992ff9151e24908f50dcd19d176
- SHA512
  
  0c744d81ddec96961d481e2539a2605242e0c07c81c46ff910fde4cc9cbd01bf7b4c601a3d4f149a30b316b66980f5485864686f358093f217abbea2ce284f13
- SSDEEP
  
  24576:3G04OijL+Kx5SeJLUKv5OnHI+rGnZHMw+x5Sb2z4RjixjML9Ka0B:3G0pijL+Kx5SeJLUChdBG5SN+MKaE
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2