General

  • Target

    58f9ab0487f7702f341cc9c14a1b819504ab1491457fe53809b358eddabce00a

  • Size

    41KB

  • Sample

    240913-l2ff6axbpq

  • MD5

    a2a50696524162c5792cf11417bf0555

  • SHA1

    fc6d4d7c1ece4878f4e78ac7f3a2af238788819e

  • SHA256

    58f9ab0487f7702f341cc9c14a1b819504ab1491457fe53809b358eddabce00a

  • SHA512

    725a567a24f37d488d3972c84346110bf3638beb33e8bb195ca6d03e01958b35ecf8ae22c734d64c8d8bf27427cad17e3e7967273a137fcf9043075730535427

  • SSDEEP

    768:rBOZpWVJUNNua3RsFTcuvwpw49G7DetPG3ioEHFJQUdW:kQJUjua3y9wS49G7SssQUd

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.19.83:4444/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      58f9ab0487f7702f341cc9c14a1b819504ab1491457fe53809b358eddabce00a

    • Size

      41KB

    • MD5

      a2a50696524162c5792cf11417bf0555

    • SHA1

      fc6d4d7c1ece4878f4e78ac7f3a2af238788819e

    • SHA256

      58f9ab0487f7702f341cc9c14a1b819504ab1491457fe53809b358eddabce00a

    • SHA512

      725a567a24f37d488d3972c84346110bf3638beb33e8bb195ca6d03e01958b35ecf8ae22c734d64c8d8bf27427cad17e3e7967273a137fcf9043075730535427

    • SSDEEP

      768:rBOZpWVJUNNua3RsFTcuvwpw49G7DetPG3ioEHFJQUdW:kQJUjua3y9wS49G7SssQUd

MITRE ATT&CK Matrix

Tasks