General

  • Target

    40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9

  • Size

    19KB

  • Sample

    240528-sasqqshe9w

  • MD5

    646edb4e3cbb9c001b64c2db22215c29

  • SHA1

    2cd0f12f8a167ff1da42544dfd1f18804a7a909e

  • SHA256

    40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9

  • SHA512

    cc7f33cb6bd8e1214cd40fe8d5d90f9467413c2fd3e2fa49d150e7f7121e4ac8f0ff667142d55f5c29a00484ee4328c5e229878737499b21ce9cc7a11842a621

  • SSDEEP

    192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2U6S0KpnEWF8qa1Dojjgi:KqaCF31cix+Dc4zj36S0K/FF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.196.202.214:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119

Targets

    • Target

      40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9

    • Size

      19KB

    • MD5

      646edb4e3cbb9c001b64c2db22215c29

    • SHA1

      2cd0f12f8a167ff1da42544dfd1f18804a7a909e

    • SHA256

      40095b5e3acf399b0facceadae10b996a0c866d338b7a126472b565ec05e9df9

    • SHA512

      cc7f33cb6bd8e1214cd40fe8d5d90f9467413c2fd3e2fa49d150e7f7121e4ac8f0ff667142d55f5c29a00484ee4328c5e229878737499b21ce9cc7a11842a621

    • SSDEEP

      192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2U6S0KpnEWF8qa1Dojjgi:KqaCF31cix+Dc4zj36S0K/FF46gi

MITRE ATT&CK Matrix

Tasks