General
-
Target
artifact.exe
-
Size
17KB
-
Sample
240424-gegngsfc8v
-
MD5
215c182097f03fd743386a0707f3fc4a
-
SHA1
0fe3d5308a40eeaf577b262c5d49a46ec2f97bc5
-
SHA256
be2a1749d23da0765b68ce08ad3e878f387920f500e8163843933cc40d868608
-
SHA512
74b820dbd01ae0204428cd06925503c62c0a168079a6d53009acce9de9d15ec6c08450c5403bb76b7a55c22518a154dc9968e646c076a52955cc8d4ff6a9dae6
-
SSDEEP
192:DDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH44Q/4Yn+spbBUbOj6kxiY:DDMAoKz6WtKEj7aBDitsJbAY
Malware Config
Extracted
cobaltstrike
http://185.74.222.126:80/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
-
Target
artifact.exe
-
Size
17KB
-
MD5
215c182097f03fd743386a0707f3fc4a
-
SHA1
0fe3d5308a40eeaf577b262c5d49a46ec2f97bc5
-
SHA256
be2a1749d23da0765b68ce08ad3e878f387920f500e8163843933cc40d868608
-
SHA512
74b820dbd01ae0204428cd06925503c62c0a168079a6d53009acce9de9d15ec6c08450c5403bb76b7a55c22518a154dc9968e646c076a52955cc8d4ff6a9dae6
-
SSDEEP
192:DDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH44Q/4Yn+spbBUbOj6kxiY:DDMAoKz6WtKEj7aBDitsJbAY
Score10/10-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-