Analysis
- max time kernel
143s - max time network
45s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
24/11/2022, 13:09
General
- Target 04.dll
- Size 652KB
- Sample221124-qdr79seh98
- SHA256 bd284e8249ae905bae1c37e1c5607102a07e72852202a12031f64a1f89a311d0
Score
10/10
Malware Config
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
- FlawedGraceRAT
FlawedGrace is a full-featured RAT written in C++.
- FlawedGraceRat Loader 3 IoCs
Detects FlawedGraceRat x64 loader in memory.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\04.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1428-54-0x000007FEF6F10000-0x000007FEF6FB3000-memory.dmp
memory/1428-55-0x000007FEF6E60000-0x000007FEF6F03000-memory.dmp
memory/1428-56-0x0000000001C10000-0x0000000001CB1000-memory.dmp
memory/1428-57-0x0000000001DD0000-0x0000000001E71000-memory.dmp
memory/1428-58-0x0000000001C10000-0x0000000001CB1000-memory.dmp
memory/1428-59-0x000007FEF6F10000-0x000007FEF6FB3000-memory.dmp