General

  • Target

    84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

  • Size

    1.8MB

  • Sample

    240914-rvkeesygqe

  • MD5

    a5d553cd2a5cafcd5d832c5339c0a355

  • SHA1

    2d0bc7e552cb6beaaf26a2437df2b7b6ed204a1d

  • SHA256

    84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

  • SHA512

    b300ace660d2460363a2592df14d2d927e59353982f98816c5151887a92775b952f5b202a67b9b05271d6e5940fe9e3fad82749876f18f3d967d7cb9ea6b7b8e

  • SSDEEP

    24576:+DoNECpwq1V0gNTarmxsMRI2z14zAsWt+Ec0xMkU8JsU3Aobd0MzKskwF:ooNECpwBgNTaQRF5ywHd0MzKskwF

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.223.15.245:11111/vXAN

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)

Targets

    • Target

      84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

    • Size

      1.8MB

    • MD5

      a5d553cd2a5cafcd5d832c5339c0a355

    • SHA1

      2d0bc7e552cb6beaaf26a2437df2b7b6ed204a1d

    • SHA256

      84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

    • SHA512

      b300ace660d2460363a2592df14d2d927e59353982f98816c5151887a92775b952f5b202a67b9b05271d6e5940fe9e3fad82749876f18f3d967d7cb9ea6b7b8e

    • SSDEEP

      24576:+DoNECpwq1V0gNTarmxsMRI2z14zAsWt+Ec0xMkU8JsU3Aobd0MzKskwF:ooNECpwBgNTaQRF5ywHd0MzKskwF

MITRE ATT&CK Matrix

Tasks