General

  • Target

    nimwhispers.exe

  • Size

    262KB

  • Sample

    240915-xcbbpaxgpm

  • MD5

    22db6458c458b402831e8b74621e8a1d

  • SHA1

    d4f1438bc1d39eef7fe39bd9ee5e21e988930b1f

  • SHA256

    580809c7c05f1630c637690c41db2ddea7feb0e230bf92f51deebaa495b46736

  • SHA512

    7291d1c9d25ae6ef0372dbec1e07fb742acc8e3ce0798161915c5bbe21c163684f02a7f070cde74b0e6d8fa63f99a6e1ab212e9dd8383f9f8080d2d487340c03

  • SSDEEP

    6144:IIn0gFc1UIE1gt395GTe83dMNJJJ655ZZo9W+Kki:IIn0Ac1UIE1gt3Kv3p+K1

Malware Config

Extracted

Family

cobaltstrike

C2

http://state-mgmt.us:443/amJE

Attributes
  • user_agent

    User-Agent: Microsoft-CryptoAPI/6.1

Targets

    • Target

      nimwhispers.exe

    • Size

      262KB

    • MD5

      22db6458c458b402831e8b74621e8a1d

    • SHA1

      d4f1438bc1d39eef7fe39bd9ee5e21e988930b1f

    • SHA256

      580809c7c05f1630c637690c41db2ddea7feb0e230bf92f51deebaa495b46736

    • SHA512

      7291d1c9d25ae6ef0372dbec1e07fb742acc8e3ce0798161915c5bbe21c163684f02a7f070cde74b0e6d8fa63f99a6e1ab212e9dd8383f9f8080d2d487340c03

    • SSDEEP

      6144:IIn0gFc1UIE1gt395GTe83dMNJJJ655ZZo9W+Kki:IIn0Ac1UIE1gt3Kv3p+K1

MITRE ATT&CK Matrix

Tasks