Overview

overview

10

Static

static

3

2024-05-23...uk.exe

windows7-x64

10

2024-05-23...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_f741b1824d3fed14b7d629075f68d433_ryuk

  • Size

    499KB

  • Sample

    240523-sbmwwafa7y

  • MD5

    f741b1824d3fed14b7d629075f68d433

  • SHA1

    4e52420a731952085cbf8f334891701da9dbfea3

  • SHA256

    45fddadaa43511409a1efc4d181439cf5d056391d4f62d91450ba661e74a4d7d

  • SHA512

    de057a8f5b3a9782f805f098c1226674dd1ca8d38ea2fd2710bf085de4da33b3851ef572f2408f85f209b72959917321b45bd529a5b39630747bf14f59bb36fe

  • SSDEEP

    12288:AzZy+ToGFKWekWT5jvJKw0wnPDOrzEcl:A1LiWekWT5jvJKw0wnbOH

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://storage.termservhub.com:443/embedded/singlePageReactModel.png

Attributes
  • user_agent

    Host: storage.termservhub.com Connection: close Accept-Encoding: br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203

Targets

    • Target

      2024-05-23_f741b1824d3fed14b7d629075f68d433_ryuk

    • Size

      499KB

    • MD5

      f741b1824d3fed14b7d629075f68d433

    • SHA1

      4e52420a731952085cbf8f334891701da9dbfea3

    • SHA256

      45fddadaa43511409a1efc4d181439cf5d056391d4f62d91450ba661e74a4d7d

    • SHA512

      de057a8f5b3a9782f805f098c1226674dd1ca8d38ea2fd2710bf085de4da33b3851ef572f2408f85f209b72959917321b45bd529a5b39630747bf14f59bb36fe

    • SSDEEP

      12288:AzZy+ToGFKWekWT5jvJKw0wnPDOrzEcl:A1LiWekWT5jvJKw0wnbOH

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks