Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/03/2024, 08:36
Static task
static1
Behavioral task
behavioral1
Sample
1e7e67bdb5df7fb45bed0178f61c0383.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1e7e67bdb5df7fb45bed0178f61c0383.exe
Resource
win10v2004-20240226-en
General
-
Target
1e7e67bdb5df7fb45bed0178f61c0383.exe
-
Size
327KB
-
MD5
1e7e67bdb5df7fb45bed0178f61c0383
-
SHA1
5575566aed52a8ba207632b849fe56b0817da727
-
SHA256
0efd061d82a0ec20e5730757f176f68066b7827ed1855ef185cbaeee6ab6576a
-
SHA512
8bdef3e27ff53cdeda29046f41d44c213f921f99e018e037b895fea4486e1af10f8a9cc0c1046cb9eecff00f50c4e77009e8aecb8f7e97eacc225600d3429421
-
SSDEEP
3072:h9CQFCq6u+jzvJxD2Xqo044NCsvsbToS8lMxDk69wEz:bnC77vJxD4qb44NGbToS8lMxDTnz
Malware Config
Extracted
cobaltstrike
http://122.51.118.39:23333/vfO2
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.