Overview

overview

10

Static

static

3

artifact.exe

windows7-x64

10

artifact.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    artifact.exe

  • Size

    17KB

  • Sample

    240519-s5b2gade23

  • MD5

    3a87727e80537e3d27798bc4af55a54b

  • SHA1

    b0382a36de85f88a4adf23eaa7a0c779f9bf3e1f

  • SHA256

    bac119d2db4efdad6c6b264942e0e10ec5c3d919480b8ed2b25a747ad4e8a96e

  • SHA512

    4e8d393bfda66d220a81edac93912a78d7893920773bd5f6c1dfc5a4edbc2fc8488688da984272d1b16b167bb1c233b7579c0ff78ef0a872df7bb95e4561b7c9

  • SSDEEP

    192:NDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4CL/A0tUmVw1BUbOj6kxiY:NDMAoKz6WtKEj7aBDixLZzVw1bAY

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.144.220.86:5667/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      artifact.exe

    • Size

      17KB

    • MD5

      3a87727e80537e3d27798bc4af55a54b

    • SHA1

      b0382a36de85f88a4adf23eaa7a0c779f9bf3e1f

    • SHA256

      bac119d2db4efdad6c6b264942e0e10ec5c3d919480b8ed2b25a747ad4e8a96e

    • SHA512

      4e8d393bfda66d220a81edac93912a78d7893920773bd5f6c1dfc5a4edbc2fc8488688da984272d1b16b167bb1c233b7579c0ff78ef0a872df7bb95e4561b7c9

    • SSDEEP

      192:NDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4CL/A0tUmVw1BUbOj6kxiY:NDMAoKz6WtKEj7aBDixLZzVw1bAY

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks