General

  • Target
    4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
  • Size 20KB
  • Sample260821-mesnmsstf1
  • SHA256 4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • cobaltstrike

C2
  • http://103.54.153.49:80/XQCq

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)

Targets

    • Target
      artifact2_x64.exe
    • Size 40KB
    • SHA256 24e0082d1a5c13b2854d7cdd3ab724cf8f8c1af83b262aeb0a1540268efe7bb4
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Matrix

Tasks