Analysis
- max time kernel
106s - max time network
110s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
01/11/2022, 10:57
General
- Target 4819b0effcca505c4cd3f55e00bc74f9.exe
- Size 442KB
- Sample221101-m2e13acafk
- SHA256 c9f718a62c959746582237befb3f0d7446315ec8553617dba9483663ba5b0840
Score
10/10
Malware Config
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4819b0effcca505c4cd3f55e00bc74f9.exe"C:\Users\Admin\AppData\Local\Temp\4819b0effcca505c4cd3f55e00bc74f9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2012-54-0x0000000075E81000-0x0000000075E83000-memory.dmp
memory/2012-55-0x0000000000EF0000-0x0000000000F8D000-memory.dmp
memory/2012-56-0x00000000034E0000-0x00000000036A4000-memory.dmp
memory/2012-57-0x0000000000340000-0x000000000037D000-memory.dmp
memory/2012-58-0x00000000034E0000-0x00000000036A4000-memory.dmp