Analysis
-
max time kernel
227s -
max time network
274s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 06:59
General
-
Target
575eff3ad00987c45e34219c5c1d00f2fa1cdcb4197e3608fc611ad84be16817.exe
-
Size
19KB
-
MD5
e4847f959b7185c65a1b52ae091dfe03
-
SHA1
f7dc103aa5a6f404ead74360486e7424e676d3e9
-
SHA256
575eff3ad00987c45e34219c5c1d00f2fa1cdcb4197e3608fc611ad84be16817
-
SHA512
dee79a1b6ccd5f814de5e869bacec3a9526434b1c93f67ee1ea3905b3c58cba46f7e3efed095e75c5109373b505946122a7ecd204b68b3db8311d526fc9ef66c
-
SSDEEP
192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Q9/MvAWF8qa1Dojjgi:CqaCF31cix+Dc4zj79KFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.0.105:80/Bu8n
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\575eff3ad00987c45e34219c5c1d00f2fa1cdcb4197e3608fc611ad84be16817.exe"C:\Users\Admin\AppData\Local\Temp\575eff3ad00987c45e34219c5c1d00f2fa1cdcb4197e3608fc611ad84be16817.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB