General
- Target 77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb.zip
- Size 131KB
- Sample240830-jgr84sthpr
- SHA256 b386365632296b71efa94ec41c911eff3b7845da2d51a1894dabb868216ce037
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
Botnet
-
391144938
C2
-
http://atttp123.pwns.fun:53/pixel
Attributes
-
access_type
512
-
beacon_type
256
-
host
atttp123.pwns.fun,/pixel
-
http_method1
GET
-
http_method2
POST
-
maxdns
255
-
polling_time
60000
-
port_number
53
-
sc_process32
%windir%\syswow64\rundll32.exe
-
sc_process64
%windir%\sysnative\rundll32.exe
-
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDohWpPN9dK5Iaq3j5MARwhwXxMD+LZJY92SEg755tH3cbGJDwjAjae+Cq14PUO5w33EpPbdmLoEfwZmXv2Zz/AYj0O8mNmRw35sEPhPXGKj1Snqz4qS1EVBYgJOSMLEUCg7LBwHQtvsGnoZjszjkVqf9Hi9INcnBF8qLyh4JrKQIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-
unknown1
4096
-
watermark
391144938
Extracted
Family
-
cobaltstrike
Botnet
-
0
Attributes
-
watermark
0
Targets
-
- Target 77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb
- Size 272KB
- SHA256 77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb
Score10/10-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.