General
-
Target
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216
-
Size
3.8MB
-
Sample
240913-wvzass1bpj
-
MD5
e45327c4b8b1981130f11447f3d570d9
-
SHA1
2f6e4e4e65723051c909b932cceed1e521cbbb0a
-
SHA256
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216
-
SHA512
afe75a686766133df7e8bdf6dbcd684a72f3b68f218165ba01baab1492d2e613e34af94cd9ec008af7bd07741ee2ab981539efc6c683d1fd43ec1d25596d94e3
-
SSDEEP
49152:RJKXvSV63FWrb/TNvO90d7HjmAFd4A64nsfJb4tP1pG08igYVYaCq5EhpoYghw4T:H63FNgKigSEkWlEsRjv3zM0
Static task
static1
Behavioral task
behavioral1
Sample
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
cobaltstrike
http://1.13.160.188:8501/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
-
Target
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216
-
Size
3.8MB
-
MD5
e45327c4b8b1981130f11447f3d570d9
-
SHA1
2f6e4e4e65723051c909b932cceed1e521cbbb0a
-
SHA256
2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216
-
SHA512
afe75a686766133df7e8bdf6dbcd684a72f3b68f218165ba01baab1492d2e613e34af94cd9ec008af7bd07741ee2ab981539efc6c683d1fd43ec1d25596d94e3
-
SSDEEP
49152:RJKXvSV63FWrb/TNvO90d7HjmAFd4A64nsfJb4tP1pG08igYVYaCq5EhpoYghw4T:H63FNgKigSEkWlEsRjv3zM0
Score10/10 -