General

  • Target

    8db84871806774a5d060144a1d67efe94150091ea8c58bd94609485b282d961d

  • Size

    887KB

  • Sample

    240419-mhma2ahb51

  • MD5

    95c04741e6815ee016042ac34a0dd24c

  • SHA1

    19f380077a61eab2ba6f1024a937ee52bd78b783

  • SHA256

    8db84871806774a5d060144a1d67efe94150091ea8c58bd94609485b282d961d

  • SHA512

    ef938ffa021850b1d3c8f9f70f187b491c2ebf757c7cd87f4068fb43bd8ce9df6dd7b2265a4e774051600acb366769cef0d1b40d3572ffc4d1f358a6fb751fe5

  • SSDEEP

    12288:da6BVcO3yJU9rEa+M8gBTBeTIed39CvwaNAZlUxOgpBv+UZgaEtqe+Z:da4cO3yJU1cMRTBYd39QGUv3ZgaW+

Malware Config

Extracted

Family

cobaltstrike

C2

http://b35977a00ebd8086.safe1.lat:2082/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      8db84871806774a5d060144a1d67efe94150091ea8c58bd94609485b282d961d

    • Size

      887KB

    • MD5

      95c04741e6815ee016042ac34a0dd24c

    • SHA1

      19f380077a61eab2ba6f1024a937ee52bd78b783

    • SHA256

      8db84871806774a5d060144a1d67efe94150091ea8c58bd94609485b282d961d

    • SHA512

      ef938ffa021850b1d3c8f9f70f187b491c2ebf757c7cd87f4068fb43bd8ce9df6dd7b2265a4e774051600acb366769cef0d1b40d3572ffc4d1f358a6fb751fe5

    • SSDEEP

      12288:da6BVcO3yJU9rEa+M8gBTBeTIed39CvwaNAZlUxOgpBv+UZgaEtqe+Z:da4cO3yJU1cMRTBYd39QGUv3ZgaW+

MITRE ATT&CK Matrix

Tasks