General

  • Target

    2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216

  • Size

    3.8MB

  • Sample

    240913-wvzass1bpj

  • MD5

    e45327c4b8b1981130f11447f3d570d9

  • SHA1

    2f6e4e4e65723051c909b932cceed1e521cbbb0a

  • SHA256

    2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216

  • SHA512

    afe75a686766133df7e8bdf6dbcd684a72f3b68f218165ba01baab1492d2e613e34af94cd9ec008af7bd07741ee2ab981539efc6c683d1fd43ec1d25596d94e3

  • SSDEEP

    49152:RJKXvSV63FWrb/TNvO90d7HjmAFd4A64nsfJb4tP1pG08igYVYaCq5EhpoYghw4T:H63FNgKigSEkWlEsRjv3zM0

Malware Config

Extracted

Family

cobaltstrike

C2

http://1.13.160.188:8501/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216

    • Size

      3.8MB

    • MD5

      e45327c4b8b1981130f11447f3d570d9

    • SHA1

      2f6e4e4e65723051c909b932cceed1e521cbbb0a

    • SHA256

      2ed14b6684588231835482081d2b209485d872cac76b25b4e6fb59ddd65a5216

    • SHA512

      afe75a686766133df7e8bdf6dbcd684a72f3b68f218165ba01baab1492d2e613e34af94cd9ec008af7bd07741ee2ab981539efc6c683d1fd43ec1d25596d94e3

    • SSDEEP

      49152:RJKXvSV63FWrb/TNvO90d7HjmAFd4A64nsfJb4tP1pG08igYVYaCq5EhpoYghw4T:H63FNgKigSEkWlEsRjv3zM0

MITRE ATT&CK Matrix

Tasks