General

  • Target
    xor.exe
  • Size 2.1MB
  • Sample240518-bc8rascc96
  • SHA256 53ce8405f73176baefb696c0674e7c40a1ae995c53e38e21e84844413f419a17
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • cobaltstrike

C2
  • http://172.16.1.106:9001/xPOF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Targets

    • Target
      xor.exe
    • Size 2.1MB
    • SHA256 53ce8405f73176baefb696c0674e7c40a1ae995c53e38e21e84844413f419a17
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks