General
- Target 9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66
- Size 1.4MB
- Sample240726-h5tamstdnr
- SHA256 9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66
- MD5 73162bea55682448cd72583ae840a86c
- SHA1 a110f3f0eb48c9dbbfabac9299a731f1f8095bf5
- SHA512 4572c325ab85761116e8cdb69d6476d04fa74ed9a66d6c9c2bcf9d4fea26e076dd9856bbf1ac63407f2921b9f5e5d829600861e33c5e4c865b8d5f0fbf186d8d
- SSDEEP 24576:9TJDrdjQ/ldXkkKZeeIRHnw5faE07grkhd:fXdjy2gPP7grW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66.exe
Resource
win7-20240708-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://83.229.127.213:7778/jquery-3.3.2.slim.min.js
Attributes
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
- Target 9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66
- Size 1.4MB
- SHA256 9d4cc295656108bd62cba015160f2bb42b6d628d80d7fa14dda7bbe149803c66
- MD5 73162bea55682448cd72583ae840a86c
- SHA1 a110f3f0eb48c9dbbfabac9299a731f1f8095bf5
- SHA512 4572c325ab85761116e8cdb69d6476d04fa74ed9a66d6c9c2bcf9d4fea26e076dd9856bbf1ac63407f2921b9f5e5d829600861e33c5e4c865b8d5f0fbf186d8d
- SSDEEP 24576:9TJDrdjQ/ldXkkKZeeIRHnw5faE07grkhd:fXdjy2gPP7grW
- MD5 SHA1 SHA512 SSDEEP
Score10/10