goot

{"timestamp": 1650905020.112615, "nmap_cmd": "/usr/local/bin/nmap -p 443 --script /home/ubuntu/melting-cobalt/grab_beacon_config.nse -vv -d -n -T5 -oX - 146.70.78.43", "ip": "146.70.78.43", "port": "443", "protocol": "tcp", "service": "https", "hostnames": null, "x64_sha1": "02ad4534451e12aaaf1d2475d9fb6bf82f97dd80", "x64_sha256": "eb8893e466b4790e6e7504da48c77af6ab2dbc3be45e037e69d39e84642a66b5", "x64_md5": "e1bd2424ea594e55f566ef10a63bd360", "x86_sha1": "d6cb1bea69a5768a6e2c95dc3f3a1d7dbb1cab3c", "x86_sha256": "ee410f1ebf4f6107bdfcf8f507e6f20527b8ea57b8abadf606884abb4cb2b523", "x86_md5": "674cc7b8fd653c9c4c97b800d5eaf032", "x64_config_method_1": "GET", "x64_config_method_2": "POST", "x64_config_port": 443, "x64_config_spawn_to_x64": "%windir%\\sysnative\\rundll32.exe", "x64_config_spawn_to_x86": "%windir%\\syswow64\\rundll32.exe", "x64_config_jitter": 0, "watermark": 1580103824, "c2_host_header": "", "x64_config_polling": 60000, "x64_config_c2_server": ["146.70.78.43/fwlink"], "x64_config_beacon_type": "8 (HTTPS)", "x64_config_http_method_path_2": "/submit.php", "x64_uri_queried": "/zGj2", "x86_config_method_1": "GET", "x86_config_method_2": "POST", "x86_config_port": 443, "x86_config_spawn_to_x64": "%windir%\\sysnative\\rundll32.exe", "x86_config_spawn_to_x86": "%windir%\\syswow64\\rundll32.exe", "x86_config_jitter": 0, "x86_config_polling": 60000, "x86_config_c2_server": ["146.70.78.43/visit.js"], "x86_config_beacon_type": "8 (HTTPS)", "x86_config_http_method_path_2": "/submit.php"}