Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
10-09-2023 09:11
General
-
Target
3.exe
-
Size
3.4MB
-
MD5
28ff3afb2e386e8c7af41ca8771e7b72
-
SHA1
faaf478661fb7f9000bb38d404759eec864b0570
-
SHA256
b63ad2b8e5f165bb2ab9b970d16d5594b62f13c2533b5446e40beb90b218894b
-
SHA512
89288f4a315177b6e8a93d99c613572f076fa2e2df970432e1022eaf22f67ff06e2655bfa27914a2d4387086d5783a0264860a414007f7a34f84087e21d6a778
-
SSDEEP
49152:HZwcvLIAaR5hJT6XrHmMzMsesUEyLbJw45JyzLtMnLJs:HSoLaR5fT69esUEyXz
Score
10/10
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3.exe"C:\Users\Admin\AppData\Local\Temp\3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2896-0-0x0000023876700000-0x0000023876741000-memory.dmpFilesize
260KB
-
memory/2896-1-0x0000023876890000-0x00000238768DF000-memory.dmpFilesize
316KB
-
memory/2896-2-0x0000023876700000-0x0000023876741000-memory.dmpFilesize
260KB
-
memory/2896-3-0x0000023876890000-0x00000238768DF000-memory.dmpFilesize
316KB