D:\code\code3\myclr\obj\Debug\myclr.pdb
Behavioral task
behavioral1
Sample
699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c.dll
Resource
win10v2004-20240508-en
General
-
Target
699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c
-
Size
9KB
-
MD5
90625a60d8374735cf39a105565ae5b5
-
SHA1
5f6b76e2af80857f784a23badfd496fb5517171d
-
SHA256
699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c
-
SHA512
160de9d4a6618c13a24d0c21ca24e5d8de528e5aa9a4e25cb584091c737e34872707578c486b29e16f36e438809427ba3500a05e8d0500f568d65b103e033a69
-
SSDEEP
192:dPuvzY6CeQLxbvpX0SE4neuQPL0g6XjjGhC:dwQLdpXhw0bKC
Malware Config
Extracted
cobaltstrike
http://175.178.226.60:8011/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Signatures
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c
Files
-
699357f90ce5d7c68e71e396c0de2258a9f6cf1450e1fc092c557e3782e01c0c.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ