adding cobalt strike beacon config object

pull/392/head
goodlandsecurity 2023-05-19 14:07:24 -05:00
parent f7e6cab1bf
commit 4e5719f29a
No known key found for this signature in database
GPG Key ID: 76116114326DBCF8
1 changed files with 73 additions and 0 deletions

View File

@ -0,0 +1,73 @@
{
"attributes": {
"c2": {
"categories": [
"Network activity"
],
"description": "The C2 sample communicates with",
"misp-attribute": "url",
"multiple": true,
"ui-priority": 1
},
"jar-md5": {
"categories": [
"External analysis"
],
"description": "MD5 of adversary cobaltstrike.jar file",
"misp-attribute": "md5",
"ui-priority": 0
},
"md5": {
"categories": [
"Payload delivery"
],
"description": "MD5 of sample containing the Cobalt Strike shellcode",
"misp-attribute": "md5",
"ui-priority": 1
},
"sha1": {
"categories": [
"Payload delivery"
],
"description": "SHA1 of sample containing the Cobalt Strike shellcode",
"misp-attribute": "sha1",
"ui-priority": 1
},
"sha256": {
"categories": [
"Payload delivery"
],
"description": "SHA256 of sample containing the Cobalt Strike shellcode",
"misp-attribute": "sha256",
"ui-priority": 1
},
"vt-sha256": {
"categories": [
"External analysis"
],
"description": "SHA256 of sample uploaded to VirusTotal",
"misp-attribute": "sha256",
"ui-priority": 0
},
"watermark": {
"categories": [
"Other"
],
"description": "The watermark of sample",
"misp-attribute": "text",
"ui-priority": 0
}
},
"description": "Cobalt Strike Beacon Config",
"meta-category": "file",
"name": "cs-beacon-config",
"required": [
"jar-md5",
"md5",
"sha1",
"sha256",
"watermark"
],
"uuid": "d17355ef-ca1f-4b5a-86cd-65d877991f54",
"version": 1
}