General

  • Target

    36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5

  • Size

    17KB

  • Sample

    241118-yxxwvstgrg

  • MD5

    6f3ef7cf42326628803a687680dbe4fa

  • SHA1

    42e800bf27a5853469f97f8d58417d15ec875c66

  • SHA256

    36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5

  • SHA512

    cf0c039461dfb4128c2423455db2dde4fe23cb1ebb98fafb110773465ac80cf8757ed6edebdab6f8f03ccb9974a55a88230fa8b3e6b28310a29bca83bbb64f4c

  • SSDEEP

    192:jDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ffx92WY8BUbOj6kxiY:jDMAoKz6WtKEj7aBDiufx0WBbAY

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.4.102:8082/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5

    • Size

      17KB

    • MD5

      6f3ef7cf42326628803a687680dbe4fa

    • SHA1

      42e800bf27a5853469f97f8d58417d15ec875c66

    • SHA256

      36ef07301ba57e9fab91221b747e86651681f504179079f43671d3c226f3e8f5

    • SHA512

      cf0c039461dfb4128c2423455db2dde4fe23cb1ebb98fafb110773465ac80cf8757ed6edebdab6f8f03ccb9974a55a88230fa8b3e6b28310a29bca83bbb64f4c

    • SSDEEP

      192:jDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ffx92WY8BUbOj6kxiY:jDMAoKz6WtKEj7aBDiufx0WBbAY

MITRE ATT&CK Matrix

Tasks