General
-
Target
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7
-
Size
272KB
-
Sample
240424-j5lfgaga2v
-
MD5
a2da71a5eba3e38608d5652555c1d13c
-
SHA1
385de0e9e1501a4d005d1d99194f36cde89e8548
-
SHA256
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7
-
SHA512
16fe70a4a64cfb651c245f16bbff0dd8e425f38f51d28e9d45721392a4694ea3d46a7815cdc8963dc0850f7b5a5b4bfdf47b0b673fb88fbd649d754e83dc7d13
-
SSDEEP
6144:+zbUWoo5fDCvT4ZTXzCLmjIk5UDiZRrKM:+wKfOMJ8iUDw
Behavioral task
behavioral1
Sample
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7.dll
Resource
win10v2004-20240412-en
Malware Config
Extracted
cobaltstrike
391144938
http://www.sevensix.shop:80/c/msdownload/update/others/2023/01/29136388_
-
access_type
512
-
host
www.sevensix.shop,/c/msdownload/update/others/2023/01/29136388_
-
http_header1
AAAACgAAAAtBY2NlcHQ6ICovKgAAAAcAAAAAAAAADQAAAAEAAAAELmNhYgAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
-
http_header2
AAAACgAAAAtBY2NlcHQ6ICovKgAAAAcAAAAAAAAADQAAAAEAAAAELmNhYgAAAAwAAAAHAAAAAQAAAA0AAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
-
http_method1
GET
-
http_method2
POST
-
jitter
2560
-
polling_time
60000
-
port_number
80
-
sc_process32
%windir%\syswow64\wuauclt.exe
-
sc_process64
%windir%\sysnative\wuauclt.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDe85UFUE5oDj/HyI5Nm+G1x9IJcAArW+zyp9sSCy3Lct2RZbB+PrW7oJqE8w51gGU1mzGhw+9w9aTsV/KNzoPj/O0wXPhy/GpNBEZfkjDNGYAZvRf+icWz1+A1fk2EXPQ3lcK0Nx129lKlgQf8ZyQdBzeFdw1k5ZHaWQa0QLC5wIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
1.448416512e+09
-
unknown2
AAAABAAAAA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
uri
/c/msdownload/update/others/2023/01/3215234_
-
user_agent
Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.31
-
watermark
391144938
Targets
-
-
Target
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7
-
Size
272KB
-
MD5
a2da71a5eba3e38608d5652555c1d13c
-
SHA1
385de0e9e1501a4d005d1d99194f36cde89e8548
-
SHA256
1e2f04719d78e5d8b578b9fb4620cb88751b280e58fa46cfd70abd2596bc2af7
-
SHA512
16fe70a4a64cfb651c245f16bbff0dd8e425f38f51d28e9d45721392a4694ea3d46a7815cdc8963dc0850f7b5a5b4bfdf47b0b673fb88fbd649d754e83dc7d13
-
SSDEEP
6144:+zbUWoo5fDCvT4ZTXzCLmjIk5UDiZRrKM:+wKfOMJ8iUDw
Score10/10 -