Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
14/11/2023, 01:21
General
-
Target
afb7e8b63558574f48a385216b42264509a6fccec2e2c005cb8c0b06e44d5fc7.exe
-
Size
19KB
-
MD5
1eeb21f5bc76671767fdfe7202356af0
-
SHA1
60b8b46ac35435b82c4cb289251c2faa3005c964
-
SHA256
afb7e8b63558574f48a385216b42264509a6fccec2e2c005cb8c0b06e44d5fc7
-
SHA512
4e3f1406f270912e906a6f8d7041b35e06490615b20f4a0722b37f0415a2317fcc47fa05dee3080a18907c4a48ee2e6e7627724ea285d6d1665342ad9d6f5dc3
-
SSDEEP
192:RV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2rSDHC0hWF8qa1Dojjgi:jqaCF31cix+Dc4zjsS0FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://194.156.98.178:3737/P9qc
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.4.1263.203; Windows NT 6.1; WOW64; Trident/5.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\afb7e8b63558574f48a385216b42264509a6fccec2e2c005cb8c0b06e44d5fc7.exe"C:\Users\Admin\AppData\Local\Temp\afb7e8b63558574f48a385216b42264509a6fccec2e2c005cb8c0b06e44d5fc7.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB