General

  • Target

    70521464aa326fe80c5f6d4ec506aa1f26e775a49a3644457745212f2ff6d2ad

  • Size

    19KB

  • Sample

    240919-vnfpfazdqc

  • MD5

    dc57d622cebbd34b5598be0f86b1dfe3

  • SHA1

    667239eddf07b87efc3c34a54d63d487e2e2b2de

  • SHA256

    70521464aa326fe80c5f6d4ec506aa1f26e775a49a3644457745212f2ff6d2ad

  • SHA512

    e2f020c5443c7211c384f2f49fbe6a747891791630b75e5e17aeab64b43b37ce65375ef8e4cac108d9becf7b09c2c36da90f9be3ab8642b5127b57a010c7fda8

  • SSDEEP

    192:eV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2PPNWF8qa1Dojjgi:oqaCF31cix+Dc4zjuPgFF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.8.8.8:80/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      70521464aa326fe80c5f6d4ec506aa1f26e775a49a3644457745212f2ff6d2ad

    • Size

      19KB

    • MD5

      dc57d622cebbd34b5598be0f86b1dfe3

    • SHA1

      667239eddf07b87efc3c34a54d63d487e2e2b2de

    • SHA256

      70521464aa326fe80c5f6d4ec506aa1f26e775a49a3644457745212f2ff6d2ad

    • SHA512

      e2f020c5443c7211c384f2f49fbe6a747891791630b75e5e17aeab64b43b37ce65375ef8e4cac108d9becf7b09c2c36da90f9be3ab8642b5127b57a010c7fda8

    • SSDEEP

      192:eV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2PPNWF8qa1Dojjgi:oqaCF31cix+Dc4zjuPgFF46gi

MITRE ATT&CK Matrix

Tasks