300c090861a547a4c211b15b9f45d6dcb976128c21b78b6c38d1cf4c5d998e12 | Triage

Analysis

max time kernel
148s
max time network
150s
platform
windows10_x64
resource
win10v20201028
submitted
06-03-2021 19:40

Sharing

Report Analysis Logs

General

Target

CozyBearImplant.bin.exe
Size

3.0MB
MD5

ce227ae503e166b77bf46b6c8f5ee4da
SHA1

cb872edd1f532c10d0167c99530a65c4d4532a1e
SHA256

b101cd29e18a515753409ae86ce68a4cedbe0d640d385eb24b9bbb69cf8186ae
SHA512

529a7c357ba6588482dff00d6d8c245e4c8b97c23ad1f48e1542406c24c6a72f3e1f02752e2ed3cbb904880f3f7dfbab66d9d50ec24ecc3373aba4c334e397b8

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\CozyBearImplant.bin.exe
"C:\Users\Admin\AppData\Local\Temp\CozyBearImplant.bin.exe"
1⤵
PID:644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/644-2-0x000000001E000000-0x000000001E263000-memory.dmp

Filesize
2.4MB

Download
memory/644-3-0x0000000010000000-0x00000000100B4000-memory.dmp

Filesize
720KB

Download
memory/644-4-0x00000000001F0000-0x00000000001FE000-memory.dmp

Filesize
56KB

Download