Analysis
- max time kernel
38s - max time network
37s - platform
windows7_x64 - resource
win7v20201028 - submitted
11/03/2021, 08:07
General
- Target a8979ed3ebb02513d366e126a8f5e2830f7590207dc30bb936fb0ddfe4bd543b.exe
- Size 17KB
- Sample210311-c19trqv1ka
- SHA256 a8979ed3ebb02513d366e126a8f5e2830f7590207dc30bb936fb0ddfe4bd543b
Score
10/10
Malware Config
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8979ed3ebb02513d366e126a8f5e2830f7590207dc30bb936fb0ddfe4bd543b.exe"C:\Users\Admin\AppData\Local\Temp\a8979ed3ebb02513d366e126a8f5e2830f7590207dc30bb936fb0ddfe4bd543b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1200-3-0x000007FEF6080000-0x000007FEF62FA000-memory.dmp
memory/1888-2-0x0000000000020000-0x0000000000021000-memory.dmp
memory/1888-4-0x000007FEFBA71000-0x000007FEFBA73000-memory.dmp