Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
08/01/2024, 15:24
General
-
Target
a0d41b6beb96179d6ba96590d5dab5f8fc8c02ed579891a494fff5449b4149d4.exe
-
Size
19KB
-
MD5
d60f456eae540553fca708dae3771f56
-
SHA1
9f7639a82891c47ddf8a39b4eb840501fc637091
-
SHA256
a0d41b6beb96179d6ba96590d5dab5f8fc8c02ed579891a494fff5449b4149d4
-
SHA512
c3e37505ebb3a9d9a98b8df32a83d39b79b277e70a9232d1f1fe8998d88948d9da490f11f92ac51a9f669dabb98e41d5907549be8a8e64808c79856efcb180f5
-
SSDEEP
192:1V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dL0YoWF8qa1Dojjgi:XqaCF31cix+Dc4zjCJFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://81.71.140.170:6666/eLx4
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0d41b6beb96179d6ba96590d5dab5f8fc8c02ed579891a494fff5449b4149d4.exe"C:\Users\Admin\AppData\Local\Temp\a0d41b6beb96179d6ba96590d5dab5f8fc8c02ed579891a494fff5449b4149d4.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB