Analysis
-
max time kernel
134s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
02-07-2022 12:31
Static task
static1
Behavioral task
behavioral1
Sample
agent.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
agent.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
agent.exe
-
Size
545KB
-
MD5
30d90a6fdb0f3f470579cc0e3e1d36fa
-
SHA1
fa4c52785712d11db6eb7a45ab2bd4eed2c12c3d
-
SHA256
4f5c8b187e20ed826c9e16ace0333b554d8345f97cd57cb4778d10915c059443
-
SHA512
bd50b9a087b528c16c4d753f1c0dd54c1ecd42ff191f3e055a05fc9b8be685ff98cdc2fdfd8c6e3dc707709cf71b103e9894faf3e274de137528d98800877039
Score
10/10
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response
suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/848-54-0x0000000001B50000-0x0000000001B91000-memory.dmpFilesize
260KB
-
memory/848-55-0x0000000001BA0000-0x0000000001BEF000-memory.dmpFilesize
316KB
-
memory/848-56-0x000007FEFC081000-0x000007FEFC083000-memory.dmpFilesize
8KB
-
memory/848-57-0x0000000001BA0000-0x0000000001BEF000-memory.dmpFilesize
316KB