General
-
Target
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9
-
Size
19KB
-
Sample
240528-sasqqshe9w
-
MD5
646edb4e3cbb9c001b64c2db22215c29
-
SHA1
2cd0f12f8a167ff1da42544dfd1f18804a7a909e
-
SHA256
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9
-
SHA512
cc7f33cb6bd8e1214cd40fe8d5d90f9467413c2fd3e2fa49d150e7f7121e4ac8f0ff667142d55f5c29a00484ee4328c5e229878737499b21ce9cc7a11842a621
-
SSDEEP
192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2U6S0KpnEWF8qa1Dojjgi:KqaCF31cix+Dc4zj36S0K/FF46gi
Static task
static1
Behavioral task
behavioral1
Sample
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
cobaltstrike
http://121.196.202.214:443/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119
Targets
-
-
Target
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9
-
Size
19KB
-
MD5
646edb4e3cbb9c001b64c2db22215c29
-
SHA1
2cd0f12f8a167ff1da42544dfd1f18804a7a909e
-
SHA256
40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9
-
SHA512
cc7f33cb6bd8e1214cd40fe8d5d90f9467413c2fd3e2fa49d150e7f7121e4ac8f0ff667142d55f5c29a00484ee4328c5e229878737499b21ce9cc7a11842a621
-
SSDEEP
192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2U6S0KpnEWF8qa1Dojjgi:KqaCF31cix+Dc4zj36S0K/FF46gi
Score10/10 -