Analysis
-
max time kernel
150s -
max time network
184s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 11:29
General
-
Target
6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab.exe
-
Size
19KB
-
MD5
7ff7a7e8ae51d8aebb8ca5c8f4c093e3
-
SHA1
545a54c7e0b04e963759b113ac141316fd677ec1
-
SHA256
6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab
-
SHA512
412b7294928b879f5abbab2a7ed07d41cdae62a4aef90dde97376569bced7d9c1490d3cd7a5b7f36add7d1ec6e3f371cffe667e8ae029a252558eb57e2c87add
-
SSDEEP
192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2J5RyWF8qa1Dojjgi:3qaCF31cix+Dc4zjq5JFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.199.128:8888/NOmS
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab.exe"C:\Users\Admin\AppData\Local\Temp\6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB