General
- Target CK_Office.exe
- Size 3.0MB
- Sample240518-bb35escc38
- SHA256 c7a71cb8d400bb2c759d9f24e79f510e03b93ef47ee314d814b6b8e24bd9ff43
- MD5 ff55424fd0a002f1dcd062d35b5c6a30
- SHA1 6566a4b9c07adc2466ad59b8b5fe654f68db59de
- SHA512 fc9caf39695b3914943ff3ac4a5224e7b578ed5663d732d33b439ecd29c3e7d6fbed706e52643aa32de34aa518a5f8fd083c387fbe981ae73035df8cc549f156
- SSDEEP 98304:8yzruaI6HMaJTtGbS02tWCRqedk/n0Agwf8j6NfJIDv:8PaI6HMaJTtGbQECRl2Ewf8jaC7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
CK_Office.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
CK_Office.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://124.70.99.224:2231/xu79
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET4.0E)
Targets
-
- Target CK_Office.exe
- Size 3.0MB
- SHA256 c7a71cb8d400bb2c759d9f24e79f510e03b93ef47ee314d814b6b8e24bd9ff43
- MD5 ff55424fd0a002f1dcd062d35b5c6a30
- SHA1 6566a4b9c07adc2466ad59b8b5fe654f68db59de
- SHA512 fc9caf39695b3914943ff3ac4a5224e7b578ed5663d732d33b439ecd29c3e7d6fbed706e52643aa32de34aa518a5f8fd083c387fbe981ae73035df8cc549f156
- SSDEEP 98304:8yzruaI6HMaJTtGbS02tWCRqedk/n0Agwf8j6NfJIDv:8PaI6HMaJTtGbQECRl2Ewf8jaC7
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Loads dropped DLL