General

  • Target

    816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8

  • Size

    2.5MB

  • Sample

    240825-hvpjpsshkq

  • MD5

    3ed326e4d1415ca66806b43e0dd710f3

  • SHA1

    62af7c29a280be9e14b23a416d7f2a16499cf19b

  • SHA256

    816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8

  • SHA512

    883149403b7f909bc7883992c29cd48cd44f171ab25b5d9385ba21d9c25450eaba4f5b8dac2b3a303c0bcb607d4ef9188105c045b4ba514cd2140cab1a58318b

  • SSDEEP

    49152:EcRD0LfcT8yjOORCJuy+T/pq281dkbR0NjO03/suBcNMc71:Ev+Ls28Tk0E0NBbc7

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.190.138:80/OzPD

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Targets

    • Target

      816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8

    • Size

      2.5MB

    • MD5

      3ed326e4d1415ca66806b43e0dd710f3

    • SHA1

      62af7c29a280be9e14b23a416d7f2a16499cf19b

    • SHA256

      816354c84c94c00839feaac418ac095b8d4515b75bd64e20df4ec48ca04a85e8

    • SHA512

      883149403b7f909bc7883992c29cd48cd44f171ab25b5d9385ba21d9c25450eaba4f5b8dac2b3a303c0bcb607d4ef9188105c045b4ba514cd2140cab1a58318b

    • SSDEEP

      49152:EcRD0LfcT8yjOORCJuy+T/pq281dkbR0NjO03/suBcNMc71:Ev+Ls28Tk0E0NBbc7

MITRE ATT&CK Matrix

Tasks