General

  • Target

    7f42df9b0af1216092f0208a99fe83e7bc270e2062c2a6ea418ced444707712b

  • Size

    19KB

  • Sample

    240611-sw6jqascqp

  • MD5

    aba445faf621c5d75314875dbf2805a0

  • SHA1

    674118f635eab288228f9f4e71f3aa9f03f6f861

  • SHA256

    7f42df9b0af1216092f0208a99fe83e7bc270e2062c2a6ea418ced444707712b

  • SHA512

    c4dd35f09e5d9882da9d4e6b581b9467639d7cc63d631302aa74c7e9929e84c077ca2028e6b09e6510707f888dbbd4a4c844b013dc99ef425b42d4b358157ad3

  • SSDEEP

    192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2oZPA0BIUWF8qa1Dojjgi:jqaCF31cix+Dc4zjL2FF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://cstrike.webroot.top:443/ST/TWGRYkf0/d/du92w/RUk/Z2l.htm

Attributes
  • user_agent

    Accept: */* Host: cstrike.webroot.top Connection: Keep-Alive Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E )

Targets

    • Target

      7f42df9b0af1216092f0208a99fe83e7bc270e2062c2a6ea418ced444707712b

    • Size

      19KB

    • MD5

      aba445faf621c5d75314875dbf2805a0

    • SHA1

      674118f635eab288228f9f4e71f3aa9f03f6f861

    • SHA256

      7f42df9b0af1216092f0208a99fe83e7bc270e2062c2a6ea418ced444707712b

    • SHA512

      c4dd35f09e5d9882da9d4e6b581b9467639d7cc63d631302aa74c7e9929e84c077ca2028e6b09e6510707f888dbbd4a4c844b013dc99ef425b42d4b358157ad3

    • SSDEEP

      192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2oZPA0BIUWF8qa1Dojjgi:jqaCF31cix+Dc4zjL2FF46gi

MITRE ATT&CK Matrix

Tasks