General
-
Target
e92428cd1087549e68a396dfda0ddef779c795fabe667ea10ffb170401aab564
-
Size
8.3MB
-
Sample
240923-kj6d7awfrg
-
MD5
96df6f1ada165bb37a325728adea3295
-
SHA1
06a1fd8c4d6061e8fd1d90a9630efb7a344edf62
-
SHA256
e92428cd1087549e68a396dfda0ddef779c795fabe667ea10ffb170401aab564
-
SHA512
ee4985dee1d398314d1c591abffe02faf5c506cbf263eba3dbd23ed0260cf820e6aa08c472a4909dd77f1c556d286836c077f270dbd086286e98450741dae8bb
-
SSDEEP
196608:WBCTgXMCHGLLc54i1wN+ojXx5nDasqWQ2dTNUGOSEhlcQPzZNP:4CsXMCHWUjAjx5WsqWxTR0HLP
Malware Config
Extracted
cobaltstrike
http://124.70.99.224:8093/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
-
Target
e92428cd1087549e68a396dfda0ddef779c795fabe667ea10ffb170401aab564
-
Size
8.3MB
-
MD5
96df6f1ada165bb37a325728adea3295
-
SHA1
06a1fd8c4d6061e8fd1d90a9630efb7a344edf62
-
SHA256
e92428cd1087549e68a396dfda0ddef779c795fabe667ea10ffb170401aab564
-
SHA512
ee4985dee1d398314d1c591abffe02faf5c506cbf263eba3dbd23ed0260cf820e6aa08c472a4909dd77f1c556d286836c077f270dbd086286e98450741dae8bb
-
SSDEEP
196608:WBCTgXMCHGLLc54i1wN+ojXx5nDasqWQ2dTNUGOSEhlcQPzZNP:4CsXMCHWUjAjx5WsqWxTR0HLP
Score10/10-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Loads dropped DLL
-