Overview

overview

10

Static

static

10

573fe9aff9...78.dll

windows10-2004-x64

3

573fe9aff9...78.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    573fe9aff9085eaa6d50f78e5d5821bd003f26dd8eb6eafb89a8cf8aba47ef78.zip
  • Size 102KB
  • Sample261019-sqlmcsaz9q
  • SHA256 dc4a1a6f9bb1e0767302f27faed59a3bdfb5b8e9997e6d12fcd12449723c7244
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
cobaltstrike0backdoordiscoverytrojan

Malware Config

Extracted

Family

  • cobaltstrike

Botnet

  • 0

C2

  • http://profiles.incdigest.com:80/ptj

  • http://cdn.incdigest.com:80/load

  • http://freepics.incdigest.com:80/updates.rss

Attributes
  • beacon_type

    256

  • host

    profiles.incdigest.com,cdn.incdigest.com,freepics.incdigest.com

  • http_header1

    AAAABwAAAAAAAAADAAAABgAAAAZDb29raWUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • http_header2

    AAAACgAAACZDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQAAAAcAAAAAAAAABQAAAAJpZAAAAAcAAAABAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • maxdns

    255

  • pipe_name

    \\%s\pipe\msagent_%x

  • polling_time

    60000

  • port_number

    80

  • state_machine

    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDKvIaoEZ6/qMtWMklnt1HZJdE916kLfK97xLivCgA4A1jQF87DS2fIocnKFjuEN87R/nzzLv5DEpJ7elvprWXenujDeK4Td6/rwBnmPl1V47FgWKHGeSPvkvMx+rwYqZ9xFskBm5cCV2QDIra/wowVSTNQAKMfNFpI90sL/n4ywIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • unknown1

    4096

  • unknown2

    AAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • uri

    /submit.php

  • user_agent

    Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

  • watermark

    0

Targets

    • Target
      573fe9aff9085eaa6d50f78e5d5821bd003f26dd8eb6eafb89a8cf8aba47ef78
    • Size 191KB
    • SHA256 573fe9aff9085eaa6d50f78e5d5821bd003f26dd8eb6eafb89a8cf8aba47ef78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks