Analysis
-
max time kernel
135s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
13-02-2023 10:51
General
-
Target
98cf46f89ef857a797749396c9eeb62c.exe
-
Size
194KB
-
MD5
98cf46f89ef857a797749396c9eeb62c
-
SHA1
f628c8367ff678f8907c79dfc1ce96bc4901c856
-
SHA256
f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76
-
SHA512
c9e7aeb464c8a0c268fb46b455f80afdd5b1c7e8c9e89442ffe263ca244a1b3bb8dd6a7001a47bf8678ba62076fa2069804817f1e5326b736da62cf0b4a8572a
-
SSDEEP
3072:uzsOF+4cKPo1QDLBKSWPa5jnBYP/P70zU+dTWJbIOeHE0V:uzs//duLASrBYT0zUHJcOeHE
Score
10/10
Malware Config
Extracted
Family
colibri
Version
1.4.0
Botnet
Uniques
C2
http://194.4.49.243/gate.php
rc4.plain
Signatures
-
Colibri Loader
A loader sold as MaaS first seen in August 2021.
Processes
-
C:\Users\Admin\AppData\Local\Temp\98cf46f89ef857a797749396c9eeb62c.exe"C:\Users\Admin\AppData\Local\Temp\98cf46f89ef857a797749396c9eeb62c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
24KB
-
Filesize
76KB
-
Filesize
1.4MB
-
Filesize
76KB
-
Filesize
1.4MB