Analysis
-
max time kernel
32s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
02-12-2022 09:03
General
-
Target
payload.dll
-
Size
652KB
-
MD5
a07d575b289ed3a80357c789fa485f14
-
SHA1
048acf120fa7a468a0275212b0a1f32ab8e441c2
-
SHA256
5c09c4175f49c749bf225f84236538086f5b9f1ad8522531fca34739246e4ad9
-
SHA512
15ef8e78e87dcea54f104f1ee1f005f78343a9b1e0ea941b421e3183da5136c6f158f05961b3016ed8fe485abac9fbfabc6e496a7e791913c672ef03839f842c
-
SSDEEP
12288:sRcFR26XFHnPGvjihyc3EdnDzxT0hyDEUiKVTOg4KOrrRSGCMNNlwd:sRMBnPGvjih50nDFTXOKV6WsRSqwd
Score
10/10
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
FlawedGraceRAT
FlawedGrace is a full-featured RAT written in C++.
-
FlawedGraceRat Loader 2 IoCs
Detects FlawedGraceRat x64 loader in memory.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\payload.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
652KB
-
Filesize
652KB
-
Filesize
652KB
-
Filesize
644KB
-
Filesize
644KB