Analysis
-
max time kernel
150s -
max time network
169s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
05-01-2024 21:47
General
-
Target
0edb99b418f70ca9958fcec1c27255ea75a70d7ca45b23db82e727679de02a57.exe
-
Size
19KB
-
MD5
e58910019d03d23f778e3b842ce61834
-
SHA1
10d52ba2be91ad9e7995e606fe31711a5c671b9f
-
SHA256
0edb99b418f70ca9958fcec1c27255ea75a70d7ca45b23db82e727679de02a57
-
SHA512
7294029e8aa93d3e52728908980cc54e6982629c79ef29ca7caff736671b356ea8329a97be17707442a26bc29a48d1fb2bd3df32debeb35869efa833bb3bb85b
-
SSDEEP
192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2OhYJoyLJLWF8qa1Dojjgi:uqaCF31cix+Dc4zjJhYlLoFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://39.104.20.145:80/BbMl
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0edb99b418f70ca9958fcec1c27255ea75a70d7ca45b23db82e727679de02a57.exe"C:\Users\Admin\AppData\Local\Temp\0edb99b418f70ca9958fcec1c27255ea75a70d7ca45b23db82e727679de02a57.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB