Overview
overview
10Static
static
10sample.zip
windows7-x64
1sample.zip
windows10-2004-x64
1temp/1.c
windows7-x64
3temp/1.c
windows10-2004-x64
3temp/1.exe
windows7-x64
10temp/1.exe
windows10-2004-x64
10temp/123
ubuntu-24.04-amd64
1temp/CS4.9/CS.lnk
windows7-x64
3temp/CS4.9/CS.lnk
windows10-2004-x64
3temp/CS4.9...ke.bat
windows7-x64
1temp/CS4.9...ke.bat
windows10-2004-x64
1temp/CS4.9...at.lnk
windows7-x64
6temp/CS4.9...at.lnk
windows10-2004-x64
7temp/CS4.9...ke.vbs
windows7-x64
1temp/CS4.9...ke.vbs
windows10-2004-x64
7temp/CS4.9...bs.lnk
windows7-x64
3temp/CS4.9...bs.lnk
windows10-2004-x64
7temp/CS4.9...rImage
ubuntu-22.04-amd64
4temp/CS4.9/c2lint
ubuntu-18.04-amd64
1temp/CS4.9/c2lint
debian-9-armhf
1temp/CS4.9/c2lint
debian-9-mips
temp/CS4.9/c2lint
debian-9-mipsel
1temp/CS4.9...nt.jar
windows7-x64
1temp/CS4.9...nt.jar
windows10-2004-x64
1temp/CS4.9/uHook.jar
windows7-x64
1temp/CS4.9/uHook.jar
windows10-2004-x64
1temp/CS4.9...78.zip
windows7-x64
1temp/CS4.9...78.zip
windows10-2004-x64
1WiFi驱动...��.exe
windows7-x64
1WiFi驱动...��.exe
windows10-2004-x64
10temp/CS4.9...Fi.exe
windows7-x64
1temp/CS4.9...Fi.exe
windows10-2004-x64
10Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09-09-2024 11:13
Behavioral task
behavioral1
Sample
sample.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sample.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
temp/1.c
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
temp/1.c
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
temp/1.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
temp/1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
temp/123
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral8
Sample
temp/CS4.9/CS.lnk
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
temp/CS4.9/CS.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
temp/CS4.9/Cobalt_Strike.bat
Resource
win7-20240708-en
Behavioral task
behavioral11
Sample
temp/CS4.9/Cobalt_Strike.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
temp/CS4.9/Cobalt_Strike.bat.lnk
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
temp/CS4.9/Cobalt_Strike.bat.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
temp/CS4.9/Cobalt_Strike.vbs
Resource
win7-20240708-en
Behavioral task
behavioral15
Sample
temp/CS4.9/Cobalt_Strike.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
temp/CS4.9/Cobalt_Strike.vbs.lnk
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
temp/CS4.9/Cobalt_Strike.vbs.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
temp/CS4.9/TeamServerImage
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral19
Sample
temp/CS4.9/c2lint
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral20
Sample
temp/CS4.9/c2lint
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral21
Sample
temp/CS4.9/c2lint
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral22
Sample
temp/CS4.9/c2lint
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral23
Sample
temp/CS4.9/cobaltstrike-client.jar
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
temp/CS4.9/cobaltstrike-client.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
temp/CS4.9/uHook.jar
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
temp/CS4.9/uHook.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
temp/CS4.9/uploads/CVE-2024-30078.zip
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
temp/CS4.9/uploads/CVE-2024-30078.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
WiFi驱动高危漏洞补丁.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
WiFi驱动高危漏洞补丁.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
temp/CS4.9/uploads/WiFi.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
temp/CS4.9/uploads/WiFi.exe
Resource
win10v2004-20240802-en
General
-
Target
temp/CS4.9/cobaltstrike-client.jar
-
Size
24.4MB
-
MD5
a09b2907278a6452d91ed4dbd9798e38
-
SHA1
26cffb1154cd9e50098fa1604df868facd4f9bae
-
SHA256
e6625119e4491a1bd42849778816250f4658fac1d5554fd51e5ba67e0b244f56
-
SHA512
9454f1ad2e21932e47047812655e7ba53faeccf941d92baa755e24254cb890931455086b3e92d5c644315d584d2e3310a4cc8693cc62d9d0f5ba1dae02c9a74d
-
SSDEEP
786432:jXWN48462ATqLG7NnX0EGqIIV7+85uRLben0GS:rXnpUqLAZBIIV7qLa05
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2728 java.exe 2728 java.exe 2728 java.exe 2728 java.exe