Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 07:27
General
-
Target
9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a.exe
-
Size
19KB
-
MD5
453dbe4e4d9a3b934e05073b0046a2a5
-
SHA1
d45047edaef4f7ceced1432bcdde782ddb382895
-
SHA256
9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a
-
SHA512
72f2cad1ab5083d1f32ea887da70f7d31e5ecfe17e5bad9e00dadc66421732edceecb0ddf54dc30c785f73d674ac607c993c79a6e4639dfecdabbdd714436d9e
-
SSDEEP
192:+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/299FA3uWF8qa1Dojjgi:IqaCF31cix+Dc4zjY9wPFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.100.128:80/9hoM
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a.exe"C:\Users\Admin\AppData\Local\Temp\9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB