Overview

overview

10

Static

static

3

89646bd091...cs.exe

windows7-x64

1

89646bd091...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89646bd091a2263b151cd926cca7000290b312942238dbfcf0c13aa28153d09e_NeikiAnalytics.exe

  • Size

    5.0MB

  • Sample

    240629-j58wrsxanq

  • MD5

    6de98e3d47d4a1ecbfdfe27f3993c7a0

  • SHA1

    3e8253ec3a0e714e320790b9d21e0367d73f40d7

  • SHA256

    89646bd091a2263b151cd926cca7000290b312942238dbfcf0c13aa28153d09e

  • SHA512

    18ef52a6b3e82520cb394911ef8f50f78e280f57a4a5f77cc2b3b213e9ffe625ea4216719480709e68b80d4e09fc6f3f180be84b332dd9032385c84ef006ba65

  • SSDEEP

    49152:w7JtrZDk81EH9eMazYq5VvMQIyCAYke3LpjKyFi+7MOYLOVBRs9pv5QBexEZjXju:ufEHUxYqMygkCia9lLZjS/

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://80.87.206.120:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      89646bd091a2263b151cd926cca7000290b312942238dbfcf0c13aa28153d09e_NeikiAnalytics.exe

    • Size

      5.0MB

    • MD5

      6de98e3d47d4a1ecbfdfe27f3993c7a0

    • SHA1

      3e8253ec3a0e714e320790b9d21e0367d73f40d7

    • SHA256

      89646bd091a2263b151cd926cca7000290b312942238dbfcf0c13aa28153d09e

    • SHA512

      18ef52a6b3e82520cb394911ef8f50f78e280f57a4a5f77cc2b3b213e9ffe625ea4216719480709e68b80d4e09fc6f3f180be84b332dd9032385c84ef006ba65

    • SSDEEP

      49152:w7JtrZDk81EH9eMazYq5VvMQIyCAYke3LpjKyFi+7MOYLOVBRs9pv5QBexEZjXju:ufEHUxYqMygkCia9lLZjS/

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks