Analysis
- max time kernel
136s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
18/05/2024, 01:07
General
- Target 1.exe
- Size 1.8MB
- Sample240518-bgph8acf36
- SHA256 dd084381bdcce143bebf43377a18930284ec82b70172526f6439d12aeb1e0b2f
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://101.43.96.90:443/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.130 Safari/537.36
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1.exe"C:\Users\Admin\AppData\Local\Temp\1.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3556-0-0x00000000029E0000-0x00000000029E1000-memory.dmp