admin/tsale-TA_tooling
1
0
Fork 0
mirror of https://github.com/tsale/TA_tooling synced 2026-06-08 17:58:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update C2_Infra-Dec2322.txt

Browse Source 
Added bazaar links
This commit is contained in:
Kostas
2022-12-23 22:53:39 -08:00
committed by GitHub
parent bb975083a4
commit d35e14850a
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
C2_Infra-Dec2322.txt
+8
View File
@@ -3,7 +3,9 @@
ports:443
beacons:
- beacon.dll | be0eae80515553de45108c8d3c6d54dda7597536968031dc40c732c0961ec6fa
- https://bazaar.abuse.ch/sample/be0eae80515553de45108c8d3c6d54dda7597536968031dc40c732c0961ec6fa
- csrss.dll | 4b89d259196985a0c49253c58fee8182a1ae5482af84ba2ed39cc98d798f60de
- https://bazaar.abuse.ch/sample/4b89d259196985a0c49253c58fee8182a1ae5482af84ba2ed39cc98d798f60de/
- Location on disc: C:\Users\<user>\AppData\Local\Temp
@@ -12,6 +14,7 @@ beacons:
ports:443
beacons:
- friend.dat | 114bcc91d144bf62815ea51a8536049346e9d075937820e29f25605b0088d833
- https://bazaar.abuse.ch/sample/114bcc91d144bf62815ea51a8536049346e9d075937820e29f25605b0088d833
- Location on disc: %USERPROFILE%
@@ -20,7 +23,9 @@ beacons:
ports:443
beacons:
- smss.dll | cb458362e56ace4b3f2859a2e340fa5afefcff4e46acff0ba5968a1d4c9e439e
- https://bazaar.abuse.ch/sample/cb458362e56ace4b3f2859a2e340fa5afefcff4e46acff0ba5968a1d4c9e439e
- Registry.dll | cf7e9ef49ff3572505c46646c37a24d32caee5a1d5a01e7c75b9943f613977b4
- https://bazaar.abuse.ch/sample/cf7e9ef49ff3572505c46646c37a24d32caee5a1d5a01e7c75b9943f613977b4
- Location on disc: C:\Users\<user>\AppData\Local\Temp
@@ -30,6 +35,7 @@ ports:
- 443: Cobalt Strike C2
beacons:
- xc.dll | 35bcc6e1410f3b7ef95301d996f5713e6811fc09b98edeb51d0222cbe099ce14
- https://bazaar.abuse.ch/sample/35bcc6e1410f3b7ef95301d996f5713e6811fc09b98edeb51d0222cbe099ce14
- Location on disc: C:\Users\<user>\AppData\Local\Temp
5) ineoserver.com | 154.7.253.15 (Cobalt Strike C2: PowerShell Loader)
@@ -63,7 +69,9 @@ ports:
- 8443,443: Cobalt Strike C2
beacons:
- lsass.exe | 6b62627e4661becc11a7df7adc6300c91ba639f39adfdf80fae458326187a648
- https://bazaar.abuse.ch/sample/6b62627e4661becc11a7df7adc6300c91ba639f39adfdf80fae458326187a648
- lsass.dll | 34f64043b5469aa05c9f2ca03127e15c247249eabb6f743bc4ec9c90e137c031
- https://bazaar.abuse.ch/sample/34f64043b5469aa05c9f2ca03127e15c247249eabb6f743bc4ec9c90e137c031
- Location on disc: C:\Users\<user>\AppData\Local\Temp