Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
24/02/2024, 11:33
Static task
static1
Behavioral task
behavioral1
Sample
765b7ef67c4fec463a3e38d97585a24f40f852e6b1f1a255e4cdf18d471199c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
765b7ef67c4fec463a3e38d97585a24f40f852e6b1f1a255e4cdf18d471199c9.exe
Resource
win10v2004-20240221-en
General
-
Target
765b7ef67c4fec463a3e38d97585a24f40f852e6b1f1a255e4cdf18d471199c9.exe
-
Size
1.3MB
-
MD5
e7e3364cd7764e1d0ef37079e7117e16
-
SHA1
3b9f9c81bb0e4dfad56f6acb2bf4f2b51e9e4456
-
SHA256
765b7ef67c4fec463a3e38d97585a24f40f852e6b1f1a255e4cdf18d471199c9
-
SHA512
63b775cd29155eedf60ccfe4a0958130df78001dc409e558d70530cb531c175355daa4c0abe63aa1d5bec1c7d964b3da2322a70a3e1f70b73892bd2b62a8a08f
-
SSDEEP
24576:mvAxMXOCP1+NZIQWTtesoVg7exd5bnSeuqtNqOmT2B:dYOCgf/RSe3rmT2B
Malware Config
Extracted
cobaltstrike
http://192.168.137.3:80/frCB
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.