General
-
Target
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5
-
Size
17KB
-
Sample
241118-yxxwvstgrg
-
MD5
6f3ef7cf42326628803a687680dbe4fa
-
SHA1
42e800bf27a5853469f97f8d58417d15ec875c66
-
SHA256
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5
-
SHA512
cf0c039461dfb4128c2423455db2dde4fe23cb1ebb98fafb110773465ac80cf8757ed6edebdab6f8f03ccb9974a55a88230fa8b3e6b28310a29bca83bbb64f4c
-
SSDEEP
192:jDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ffx92WY8BUbOj6kxiY:jDMAoKz6WtKEj7aBDiufx0WBbAY
Static task
static1
Behavioral task
behavioral1
Sample
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
cobaltstrike
http://192.168.4.102:8082/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
Targets
-
-
Target
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5
-
Size
17KB
-
MD5
6f3ef7cf42326628803a687680dbe4fa
-
SHA1
42e800bf27a5853469f97f8d58417d15ec875c66
-
SHA256
36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5
-
SHA512
cf0c039461dfb4128c2423455db2dde4fe23cb1ebb98fafb110773465ac80cf8757ed6edebdab6f8f03ccb9974a55a88230fa8b3e6b28310a29bca83bbb64f4c
-
SSDEEP
192:jDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ffx92WY8BUbOj6kxiY:jDMAoKz6WtKEj7aBDiufx0WBbAY
Score10/10-
Cobaltstrike family
-