Overview

overview

10

Static

static

3

e6aa684abc...b9.exe

windows10-2004-x64

10

e6aa684abc...b9.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e6aa684abcd54db2a480efa3e32a907f97ea707af6a0b15cce47b27b007a25b9
  • Size 6KB
  • Sample261114-hsza5ad18y
  • SHA256 e6aa684abcd54db2a480efa3e32a907f97ea707af6a0b15cce47b27b007a25b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
cobaltstrikebackdoordiscoverytrojan

Malware Config

Extracted

Family

  • cobaltstrike

C2

  • http://192.168.0.152:80/qjt2/st.php?id=1

Attributes
  • user_agent

    Host: newshcoolapi.qjjy.org.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

Targets

    • Target
      e6aa684abcd54db2a480efa3e32a907f97ea707af6a0b15cce47b27b007a25b9
    • Size 6KB
    • SHA256 e6aa684abcd54db2a480efa3e32a907f97ea707af6a0b15cce47b27b007a25b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorcobaltstriketrojandiscovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks