230e0e70f0d1114eaafce8f5e9a7493a4157b706e0a24ba1f5f8bd4b11ffa8fb.zip
- SHA256 132d0e54ffab0ab087d5d767f9030d052005f3494ecf8af7d691604de145c8d7
Behavioral task
behavioral1
Sample
230e0e70f0d1114eaafce8f5e9a7493a4157b706e0a24ba1f5f8bd4b11ffa8fb.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
230e0e70f0d1114eaafce8f5e9a7493a4157b706e0a24ba1f5f8bd4b11ffa8fb.dll
Resource
win10v2004-20240709-en
cobaltstrike
305419896
http://182.92.130.148:8889/fwlink
512
182.92.130.148,/fwlink
AAAABwAAAAAAAAADAAAABgAAAAZDb29raWUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
AAAACgAAACZDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQAAAAcAAAAAAAAABQAAAAJpZAAAAAcAAAABAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
GET
POST
255
60000
8889
%windir%\syswow64\rundll32.exe
%windir%\sysnative\rundll32.exe
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCTUlJ7J79z/MkkV8+MsYlOvREE2hhdGNzrKPFZ10lY0K5legA+um5JxESEaC0woDgSmOGrkh1giz/aQwd6tG4mihFgpi0oIbfwu6XZbE6ghYGyu2F7+A5TifRUzvU0YLXjK78EW12XhjHx4KopMF/AtOAueGwfiI2DmXwNzrBDvwIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
4096
AAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
/submit.php
Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)
305419896
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/230e0e70f0d1114eaafce8f5e9a7493a4157b706e0a24ba1f5f8bd4b11ffa8fb |
Unsigned PE
Checks for missing Authenticode signature.
count=152, id=210, version=61030,
count=1, id=199, version=41118,
count=41, id=207, version=50929,
count=136, id=206, version=50929,
count=10, id=205, version=50929,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=220, id=1, productName=Unmarked objects,
count=53, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,