General

  • Target

    7498039bf7377f359fab22cc06ec871bb818f98852ab9b3cdfd35ada49c983f3

  • Size

    1.1MB

  • Sample

    240730-hnkl6svdjq

  • MD5

    cb487a19827c12e791a53ec7d320400d

  • SHA1

    0d012c17fc3918b0c2b0d6d1a79749b2f3d42691

  • SHA256

    7498039bf7377f359fab22cc06ec871bb818f98852ab9b3cdfd35ada49c983f3

  • SHA512

    1be5e11f42d5e2157602f641a32c794ad4d2eb21298671ba67ed53b71a93a80cc9b207b396b843e5c7d0f4516a14094cf3bfc8fd37d37f36251e878be95397ee

  • SSDEEP

    12288:gTfvExwUiuya3jjjyl3q5AasYgErVgWzSvy/riWNZZ6TTyPpOD:gTvMxFyloAXIDSUeWNm2O

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.220.176.62:4444/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      7498039bf7377f359fab22cc06ec871bb818f98852ab9b3cdfd35ada49c983f3

    • Size

      1.1MB

    • MD5

      cb487a19827c12e791a53ec7d320400d

    • SHA1

      0d012c17fc3918b0c2b0d6d1a79749b2f3d42691

    • SHA256

      7498039bf7377f359fab22cc06ec871bb818f98852ab9b3cdfd35ada49c983f3

    • SHA512

      1be5e11f42d5e2157602f641a32c794ad4d2eb21298671ba67ed53b71a93a80cc9b207b396b843e5c7d0f4516a14094cf3bfc8fd37d37f36251e878be95397ee

    • SSDEEP

      12288:gTfvExwUiuya3jjjyl3q5AasYgErVgWzSvy/riWNZZ6TTyPpOD:gTvMxFyloAXIDSUeWNm2O

MITRE ATT&CK Matrix

Tasks