General

  • Target

    dd084381bdcce143bebf43377a18930284ec82b70172526f6439d12aeb1e0b2f.exe

  • Size

    1.8MB

  • Sample

    240519-k1eykabd5s

  • MD5

    5652bfcdc8f117cb737873b9c7a8976d

  • SHA1

    7bae879b41e88fe799b38834434e6f457c8e8486

  • SHA256

    dd084381bdcce143bebf43377a18930284ec82b70172526f6439d12aeb1e0b2f

  • SHA512

    73cf0fb178bb9a321a0e2e25c92de511df8b781bd6f7640caa27944fcac4c4f6296d627d3e51caeed5e22c45c0e3d6c03eef4dc7d3c274c6d0fb2326efb290e3

  • SSDEEP

    1536:sOrUO82JsHFU7jy2Sc8vsFrfJB+TtLnuCRcnp5bWSRGKCN+Xr9uernupv:sLysH2ny2S3vqaTtLfGp5bWSAx+r09t

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.43.96.90:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.130 Safari/537.36

Targets

    • Target

      dd084381bdcce143bebf43377a18930284ec82b70172526f6439d12aeb1e0b2f.exe

    • Size

      1.8MB

    • MD5

      5652bfcdc8f117cb737873b9c7a8976d

    • SHA1

      7bae879b41e88fe799b38834434e6f457c8e8486

    • SHA256

      dd084381bdcce143bebf43377a18930284ec82b70172526f6439d12aeb1e0b2f

    • SHA512

      73cf0fb178bb9a321a0e2e25c92de511df8b781bd6f7640caa27944fcac4c4f6296d627d3e51caeed5e22c45c0e3d6c03eef4dc7d3c274c6d0fb2326efb290e3

    • SSDEEP

      1536:sOrUO82JsHFU7jy2Sc8vsFrfJB+TtLnuCRcnp5bWSRGKCN+Xr9uernupv:sLysH2ny2S3vqaTtLfGp5bWSAx+r09t

MITRE ATT&CK Matrix

Tasks