Analysis
-
max time kernel
164s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 21:58
General
-
Target
1dcf860dc9973ddaa69998b46a32f9e7.exe
-
Size
763KB
-
MD5
1dcf860dc9973ddaa69998b46a32f9e7
-
SHA1
70c7599f29748efb40f42364267c5bfed1aeee64
-
SHA256
6d0311a34e8f6d1b5ce350ac815dc07f511f80e50539dc18ae77308955750b20
-
SHA512
1e9a738f211db5a49d8082c5ddb0ef7901710841a7c46b6d90259290826680268db98eef1f7c58c38d417fe65d99fface887240254fd5be6f470a48242661a56
-
SSDEEP
6144:whVcmtnGGLSk6V51leGnTtS+SkJwghaQI9VQB2PCjMkG6AnKzV7Ze5PLm/b6BroR:w3ntnGGL96X1lD9rnIFeyPDoXBdvR
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://47.96.129.92:9999/6Pbu
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1dcf860dc9973ddaa69998b46a32f9e7.exe"C:\Users\Admin\AppData\Local\Temp\1dcf860dc9973ddaa69998b46a32f9e7.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB