Analysis
-
max time kernel
155s -
max time network
165s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 04:37
General
-
Target
Rat.exe
-
Size
281KB
-
MD5
f8c994f9200f4155e881ab90ab1598a7
-
SHA1
608211dd3ce29cd93bb85aceae5753668cedaa97
-
SHA256
7b32248b74221a7079688ad6b857505a22f9de5d0f78100112816918636de0dd
-
SHA512
0e5ff8950f3d17d416e0b4929ad2e1a3449c36ff20e344ecaa60566755f0513a1fe64b1c3bc49ed5178a5793d6e853a0c34cf5735f9dbc73af1e71cb886430e4
-
SSDEEP
6144:xC6hRwvyDGFJ7AuEDjATIKqWk7e7HqV6TI9X+kGnvFo0e:xRwvyUJ79EDjAcKVqVikGnO0
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
C2
http://45.66.230.113:120/match
Attributes
-
watermark
0
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Rat.exe"C:\Users\Admin\AppData\Local\Temp\Rat.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
260KB
-
Filesize
312KB
-
Filesize
312KB