diff --git a/C2_Infra-Dec2322.txt b/C2_Infra-Dec2322.txt index 1ac4dad..ee08974 100644 --- a/C2_Infra-Dec2322.txt +++ b/C2_Infra-Dec2322.txt @@ -3,7 +3,9 @@ ports:443 beacons: - beacon.dll | be0eae80515553de45108c8d3c6d54dda7597536968031dc40c732c0961ec6fa + - https://bazaar.abuse.ch/sample/be0eae80515553de45108c8d3c6d54dda7597536968031dc40c732c0961ec6fa - csrss.dll | 4b89d259196985a0c49253c58fee8182a1ae5482af84ba2ed39cc98d798f60de + - https://bazaar.abuse.ch/sample/4b89d259196985a0c49253c58fee8182a1ae5482af84ba2ed39cc98d798f60de/ - Location on disc: C:\Users\\AppData\Local\Temp @@ -12,6 +14,7 @@ beacons: ports:443 beacons: - friend.dat | 114bcc91d144bf62815ea51a8536049346e9d075937820e29f25605b0088d833 + - https://bazaar.abuse.ch/sample/114bcc91d144bf62815ea51a8536049346e9d075937820e29f25605b0088d833 - Location on disc: %USERPROFILE% @@ -20,7 +23,9 @@ beacons: ports:443 beacons: - smss.dll | cb458362e56ace4b3f2859a2e340fa5afefcff4e46acff0ba5968a1d4c9e439e + - https://bazaar.abuse.ch/sample/cb458362e56ace4b3f2859a2e340fa5afefcff4e46acff0ba5968a1d4c9e439e - Registry.dll | cf7e9ef49ff3572505c46646c37a24d32caee5a1d5a01e7c75b9943f613977b4 + - https://bazaar.abuse.ch/sample/cf7e9ef49ff3572505c46646c37a24d32caee5a1d5a01e7c75b9943f613977b4 - Location on disc: C:\Users\\AppData\Local\Temp @@ -30,6 +35,7 @@ ports: - 443: Cobalt Strike C2 beacons: - xc.dll | 35bcc6e1410f3b7ef95301d996f5713e6811fc09b98edeb51d0222cbe099ce14 + - https://bazaar.abuse.ch/sample/35bcc6e1410f3b7ef95301d996f5713e6811fc09b98edeb51d0222cbe099ce14 - Location on disc: C:\Users\\AppData\Local\Temp 5) ineoserver.com | 154.7.253.15 (Cobalt Strike C2: PowerShell Loader) @@ -63,7 +69,9 @@ ports: - 8443,443: Cobalt Strike C2 beacons: - lsass.exe | 6b62627e4661becc11a7df7adc6300c91ba639f39adfdf80fae458326187a648 + - https://bazaar.abuse.ch/sample/6b62627e4661becc11a7df7adc6300c91ba639f39adfdf80fae458326187a648 - lsass.dll | 34f64043b5469aa05c9f2ca03127e15c247249eabb6f743bc4ec9c90e137c031 + - https://bazaar.abuse.ch/sample/34f64043b5469aa05c9f2ca03127e15c247249eabb6f743bc4ec9c90e137c031 - Location on disc: C:\Users\\AppData\Local\Temp