Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
10/03/2024, 08:03
General
-
Target
9966774fa4645cfccfa81899452ccc85c2f35afd00456a951031ff6e6e2b2cf4.exe
-
Size
19KB
-
MD5
60fe9362174339dca0cee525ad00a22d
-
SHA1
a2cc06024429d6f7053e9c9d8ba87507db038fe9
-
SHA256
9966774fa4645cfccfa81899452ccc85c2f35afd00456a951031ff6e6e2b2cf4
-
SHA512
1db2f6b8725d89b9281cb10549ca6d49ad8f2b3c49caed1d2ac4c3086cf577d330d13d2034aa539276a8da6f495d739a307c97592f3959ad06934a5408addf85
-
SSDEEP
192:DV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2BtJBWF8qa1Dojjgi:tqaCF31cix+Dc4zj9FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://47.97.214.255:4444/e6Vl
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9966774fa4645cfccfa81899452ccc85c2f35afd00456a951031ff6e6e2b2cf4.exe"C:\Users\Admin\AppData\Local\Temp\9966774fa4645cfccfa81899452ccc85c2f35afd00456a951031ff6e6e2b2cf4.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB