Overview

overview

10

Static

static

3

6c6846b436...18.dll

windows7-x64

10

6c6846b436...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c6846b436ec85b9179ad77fb585e20c_JaffaCakes118

  • Size

    673KB

  • Sample

    240523-1zk17aaf7t

  • MD5

    6c6846b436ec85b9179ad77fb585e20c

  • SHA1

    4d75fd0ece50bb305a34db32157da76c7fa1ef1a

  • SHA256

    f9c459824e223d5523ac6edfea7b842cf168ae135045258b04b4760f4002a86f

  • SHA512

    6b02d4f33b6bff9a3cfaa9bf50488d22b8e93fb86071aca82b3b15ca09443b50b80cd64be5a7c7fcc9ba9d2b071d8999b3d6330bcf9f43546bbd39b361b495b5

  • SSDEEP

    6144:ALTg0Ch1AO5qD+cwX2GFLU52QyH/1SurS/q37dY1U5Cf925G:6c0Ch1AOu+PpUQ1S4S/qd4T9kG

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://tiancaii.com:443/image-directory/br.png

Attributes
  • user_agent

    Connection: close Accept: */* Accept-Encoding: br User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)

Targets

    • Target

      6c6846b436ec85b9179ad77fb585e20c_JaffaCakes118

    • Size

      673KB

    • MD5

      6c6846b436ec85b9179ad77fb585e20c

    • SHA1

      4d75fd0ece50bb305a34db32157da76c7fa1ef1a

    • SHA256

      f9c459824e223d5523ac6edfea7b842cf168ae135045258b04b4760f4002a86f

    • SHA512

      6b02d4f33b6bff9a3cfaa9bf50488d22b8e93fb86071aca82b3b15ca09443b50b80cd64be5a7c7fcc9ba9d2b071d8999b3d6330bcf9f43546bbd39b361b495b5

    • SSDEEP

      6144:ALTg0Ch1AO5qD+cwX2GFLU52QyH/1SurS/q37dY1U5Cf925G:6c0Ch1AOu+PpUQ1S4S/qd4T9kG

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks