General

  • Target

    bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91

  • Size

    19KB

  • Sample

    240614-mfv56awgjd

  • MD5

    291f70abf52c45ce829077c355684130

  • SHA1

    b90bf24cf0cbd6da0ff6e0ed69a4f9d6a50d6082

  • SHA256

    bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91

  • SHA512

    c62974279a5729d91881033735fb2b7eff7a563564bd6ffad64ee7480604af5ba1e9c5882d27fe4a32386c6ccfd55ffde37c0514003fdc428c64a8c6836e82a6

  • SSDEEP

    192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ALWF8qa1Dojjgi:PqaCF31cix+Dc4zjZyFF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.200.201.15:8088/jquery-3.3.2.N2cQ4mXdZ4nIo9XI.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36

Targets

    • Target

      bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91

    • Size

      19KB

    • MD5

      291f70abf52c45ce829077c355684130

    • SHA1

      b90bf24cf0cbd6da0ff6e0ed69a4f9d6a50d6082

    • SHA256

      bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91

    • SHA512

      c62974279a5729d91881033735fb2b7eff7a563564bd6ffad64ee7480604af5ba1e9c5882d27fe4a32386c6ccfd55ffde37c0514003fdc428c64a8c6836e82a6

    • SSDEEP

      192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ALWF8qa1Dojjgi:PqaCF31cix+Dc4zjZyFF46gi

MITRE ATT&CK Matrix

Tasks