Analysis
-
max time kernel
145s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/01/2024, 19:56
General
-
Target
41c5264493cb5ac580c53d20dbb62481.exe
-
Size
50KB
-
MD5
41c5264493cb5ac580c53d20dbb62481
-
SHA1
d25df7b9ba176d59c1606a7b9ff4ec21eb6252ea
-
SHA256
b00a0bfeb69d9d8cbb0a4f3ee980bfa23bf5f7eab3a23b14bc4fdc18fa135e9c
-
SHA512
c1b108978f638e02a8998f027761f605154bb15874616173051f991dac28bcaac2f9f9ce513660a7bf50495f0ff259d44e74d7702903906c76b8c407e66763df
-
SSDEEP
768:SXhcFT0i46+LBIhJ/zhMcBLIuF6IxnCx26GUOVmVl2rlaXYXKBUMNBvHcyQtWLV:MiA/6+LUTfmuUx26ys2x+Y+9UWLV
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.10.136:8080/KoVM
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSSEM)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\41c5264493cb5ac580c53d20dbb62481.exe"C:\Users\Admin\AppData\Local\Temp\41c5264493cb5ac580c53d20dbb62481.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
88KB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB