Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2024, 07:39

General

  • Target

    a87e2d1a43f6f27eed07f6adff6496de9d06aac332211d67894955cc7e97ccd9.exe

  • Size

    19KB

  • MD5

    1ce1343861202e355237ce89ec27313f

  • SHA1

    521d2b8e5fa4d8dd639db385039c3651becd83f5

  • SHA256

    a87e2d1a43f6f27eed07f6adff6496de9d06aac332211d67894955cc7e97ccd9

  • SHA512

    226eccea748a590b86c559b9788892426dd681622c41ec1c9f30a22919f4cb9fe63905456710e38817a8d9a3161880a48f7f26bb036c6e4b844d97adbc3fd13c

  • SSDEEP

    192:LWV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2qm4dSM93BWF8qa1Dojjgi:LwqaCF31cix+Dc4zj2mmFF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.157.130:6666/GbhL

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\a87e2d1a43f6f27eed07f6adff6496de9d06aac332211d67894955cc7e97ccd9.exe
    "C:\Users\Admin\AppData\Local\Temp\a87e2d1a43f6f27eed07f6adff6496de9d06aac332211d67894955cc7e97ccd9.exe"
    1⤵
      PID:2924

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2924-0-0x0000000000020000-0x0000000000021000-memory.dmp

            Filesize

            4KB

          • memory/2924-1-0x0000000000400000-0x000000000040C000-memory.dmp

            Filesize

            48KB