Overview

overview

10

Static

static

3

建筑工�...��.exe

windows7-x64

10

建筑工�...��.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    建筑工人实名制管理平台标准化服务接口登记信息.exe

  • Size

    2.4MB

  • Sample

    241119-hje6ws1ndw

  • MD5

    1a0e50a7a3bb6056f7f58919f35111bf

  • SHA1

    559f7cd0ee4b1b9da70bd58f51df8653f779f19d

  • SHA256

    bd2475288e3753ab87602e5b0c51b212c5bac79bef0fbebecfca961c17aaa21d

  • SHA512

    956dc91c3f469c317e62d6b268eb8002f13abf2a952853be5aee4a5ca559666a75668ccba18d46a89a096ed474013e1bb6758dab595291ff72714b7bdd8796ed

  • SSDEEP

    24576:YURHk6/fx3m2wYCP5G5irGCuFqE5g87PY3cxlD1:YyEcfxW2wYQY5IGCmg87Pa2lD1

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://139.224.216.18:443/react.development.js

Attributes
  • user_agent

    Accept: text/html, application/xhtml+xml, image/jxr, */* Referer: https://unpkg.com/browse/[email protected]/umd/ User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Win64; x64; Trident/4.0)

Targets

    • Target

      建筑工人实名制管理平台标准化服务接口登记信息.exe

    • Size

      2.4MB

    • MD5

      1a0e50a7a3bb6056f7f58919f35111bf

    • SHA1

      559f7cd0ee4b1b9da70bd58f51df8653f779f19d

    • SHA256

      bd2475288e3753ab87602e5b0c51b212c5bac79bef0fbebecfca961c17aaa21d

    • SHA512

      956dc91c3f469c317e62d6b268eb8002f13abf2a952853be5aee4a5ca559666a75668ccba18d46a89a096ed474013e1bb6758dab595291ff72714b7bdd8796ed

    • SSDEEP

      24576:YURHk6/fx3m2wYCP5G5irGCuFqE5g87PY3cxlD1:YyEcfxW2wYQY5IGCmg87Pa2lD1

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks