General
-
Target
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91
-
Size
19KB
-
Sample
240614-mfv56awgjd
-
MD5
291f70abf52c45ce829077c355684130
-
SHA1
b90bf24cf0cbd6da0ff6e0ed69a4f9d6a50d6082
-
SHA256
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91
-
SHA512
c62974279a5729d91881033735fb2b7eff7a563564bd6ffad64ee7480604af5ba1e9c5882d27fe4a32386c6ccfd55ffde37c0514003fdc428c64a8c6836e82a6
-
SSDEEP
192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ALWF8qa1Dojjgi:PqaCF31cix+Dc4zjZyFF46gi
Static task
static1
Behavioral task
behavioral1
Sample
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
cobaltstrike
http://101.200.201.15:8088/jquery-3.3.2.N2cQ4mXdZ4nIo9XI.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
Targets
-
-
Target
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91
-
Size
19KB
-
MD5
291f70abf52c45ce829077c355684130
-
SHA1
b90bf24cf0cbd6da0ff6e0ed69a4f9d6a50d6082
-
SHA256
bf18a026c5f203980531b74b7651bba9bfd1b0887f5048869250f4bc4a9aca91
-
SHA512
c62974279a5729d91881033735fb2b7eff7a563564bd6ffad64ee7480604af5ba1e9c5882d27fe4a32386c6ccfd55ffde37c0514003fdc428c64a8c6836e82a6
-
SSDEEP
192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ALWF8qa1Dojjgi:PqaCF31cix+Dc4zjZyFF46gi
Score10/10 -