General

  • Target

    dee0d0b296942c9ce380876db2c0c24dd2752571eb92e37e8a34c701673627f2

  • Size

    1.3MB

  • Sample

    240418-h5qvhsfh5x

  • MD5

    7300a8fec3524c89ed01e2d9ba84501e

  • SHA1

    a18ba4dd3688e644b17bc2cd19bbb1904f964fda

  • SHA256

    dee0d0b296942c9ce380876db2c0c24dd2752571eb92e37e8a34c701673627f2

  • SHA512

    a0f4ad31249044ce4e4b748c802bb27c396d59f312de3041cc1f35a9119a0c158ce22ea91575ee287996e8df54bf28fc3bf20012c7b95aa987f06c906be8117b

  • SSDEEP

    24576:1LAOK1P4dBHixJwaksnOcsYgtTz1wjQgzlKYk1CztEtcsP8:1LHK1PeBHOMYgt9wVlxyS0

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.233.140:8080/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      dee0d0b296942c9ce380876db2c0c24dd2752571eb92e37e8a34c701673627f2

    • Size

      1.3MB

    • MD5

      7300a8fec3524c89ed01e2d9ba84501e

    • SHA1

      a18ba4dd3688e644b17bc2cd19bbb1904f964fda

    • SHA256

      dee0d0b296942c9ce380876db2c0c24dd2752571eb92e37e8a34c701673627f2

    • SHA512

      a0f4ad31249044ce4e4b748c802bb27c396d59f312de3041cc1f35a9119a0c158ce22ea91575ee287996e8df54bf28fc3bf20012c7b95aa987f06c906be8117b

    • SSDEEP

      24576:1LAOK1P4dBHixJwaksnOcsYgtTz1wjQgzlKYk1CztEtcsP8:1LHK1PeBHOMYgt9wVlxyS0

MITRE ATT&CK Matrix

Tasks