Analysis
-
max time kernel
129s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
02-07-2022 12:31
Static task
static1
Behavioral task
behavioral1
Sample
agent.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
agent.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
agent.exe
-
Size
545KB
-
MD5
30d90a6fdb0f3f470579cc0e3e1d36fa
-
SHA1
fa4c52785712d11db6eb7a45ab2bd4eed2c12c3d
-
SHA256
4f5c8b187e20ed826c9e16ace0333b554d8345f97cd57cb4778d10915c059443
-
SHA512
bd50b9a087b528c16c4d753f1c0dd54c1ecd42ff191f3e055a05fc9b8be685ff98cdc2fdfd8c6e3dc707709cf71b103e9894faf3e274de137528d98800877039
Score
10/10
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response
suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response