Overview

overview

10

Static

static

3

cdeea0219a...15.exe

windows7-x64

10

cdeea0219a...15.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 16:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    cdeea0219a80bc04bfb9eec7ac1f56c552eb6a38fa810cc9cf163439da5f4915.exe

  • Size

    19KB

  • MD5

    d53d4e20ac0775043b22aeb8287c682a

  • SHA1

    aaaba979084d211554f2405e7f1277d853eb3ea3

  • SHA256

    cdeea0219a80bc04bfb9eec7ac1f56c552eb6a38fa810cc9cf163439da5f4915

  • SHA512

    c1af07386348881a2f8fcd4bd2f18e8c24419ec5b26a787cac006528e19ae716aff8908dd5f22d174f3920d048e794522f567cf0e6a211d5faa80a0a1f267c81

  • SSDEEP

    192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2CTz26w4JFWF8qa1Dojjgi:aqaCF31cix+Dc4zjXzDoFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.226.137:80/IJzP

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MANM; MANM)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\cdeea0219a80bc04bfb9eec7ac1f56c552eb6a38fa810cc9cf163439da5f4915.exe
    "C:\Users\Admin\AppData\Local\Temp\cdeea0219a80bc04bfb9eec7ac1f56c552eb6a38fa810cc9cf163439da5f4915.exe"
    1⤵
      PID:2932

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2932-0-0x0000000000020000-0x0000000000021000-memory.dmp

            Filesize

            4KB

            Download

          • memory/2932-1-0x0000000000400000-0x000000000040C000-memory.dmp

            Filesize

            48KB

            Download