Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
26/08/2023, 15:40
General
-
Target
63da25e6ea4e41d9f6609be79e6d20046b9c04f0e75e85ef97b6f9e0fa11358f.exe
-
Size
19KB
-
MD5
6219d9d54c971f243a7f8c78989bfc6c
-
SHA1
7c47486e3affea669700a1aa113ac1bc5c4aeab9
-
SHA256
63da25e6ea4e41d9f6609be79e6d20046b9c04f0e75e85ef97b6f9e0fa11358f
-
SHA512
c62a293f01e2089e028bc3110c1be42404da76a0d8138ed65d1251644f6d5e4533b07deab54949bb48fbfc4f05e16bea85178d15ae86c245512efcb039a5e4bf
-
SSDEEP
192:DV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ifWF8qa1Dojjgi:tqaCF31cix+Dc4zjGFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://172.30.16.236:811/vVFK
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; yie9)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\63da25e6ea4e41d9f6609be79e6d20046b9c04f0e75e85ef97b6f9e0fa11358f.exe"C:\Users\Admin\AppData\Local\Temp\63da25e6ea4e41d9f6609be79e6d20046b9c04f0e75e85ef97b6f9e0fa11358f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB