Overview

overview

10

Static

static

3

1017070d02...a8.exe

windows7-x64

10

1017070d02...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1017070d026d991426519b351c9a24d472eaf30d37d75dcad4df794451af44a8

  • Size

    19KB

  • Sample

    240523-mh8h9sdb55

  • MD5

    77212fa099fbcfee563971465746870f

  • SHA1

    5639036884e5af34cd03e95b9b5afd5c5d936b9f

  • SHA256

    1017070d026d991426519b351c9a24d472eaf30d37d75dcad4df794451af44a8

  • SHA512

    9466729b24b2733442c635f1e2125da94755015cdd6cbc926b8c44272e45a7fedef64fc76135fba4062e6b8f2e1a2b8cc6f5bac0e5bc7685618aec28bfb06c78

  • SSDEEP

    192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2r2qrWF8qa1Dojjgi:3qaCF31cix+Dc4zj8CFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://api.googlerepo-cdn.sbs:2053/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Host: api.googlerepo-cdn.sbs Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      1017070d026d991426519b351c9a24d472eaf30d37d75dcad4df794451af44a8

    • Size

      19KB

    • MD5

      77212fa099fbcfee563971465746870f

    • SHA1

      5639036884e5af34cd03e95b9b5afd5c5d936b9f

    • SHA256

      1017070d026d991426519b351c9a24d472eaf30d37d75dcad4df794451af44a8

    • SHA512

      9466729b24b2733442c635f1e2125da94755015cdd6cbc926b8c44272e45a7fedef64fc76135fba4062e6b8f2e1a2b8cc6f5bac0e5bc7685618aec28bfb06c78

    • SSDEEP

      192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2r2qrWF8qa1Dojjgi:3qaCF31cix+Dc4zj8CFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks