General
-
Target
http://185.74.222.145:64
-
Sample
231216-fyd62acae9
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://185.74.222.145:64
Resource
win7-20231129-en
12 signatures
300 seconds
Behavioral task
behavioral2
Sample
http://185.74.222.145:64
Resource
win10v2004-20231215-en
14 signatures
300 seconds
Malware Config
Extracted
Family
cobaltstrike
C2
http://185.74.222.145:676/PPDy
http://185.74.222.145:676/y6Dj
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Targets
-
-
Target
http://185.74.222.145:64
Score10/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-