Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
30-03-2024 10:01
General
-
Target
a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad.exe
-
Size
19KB
-
MD5
c79d4ecfdf746a65b24680c793d718b1
-
SHA1
3ad2c35af128edbaf2032ca6897cd60bc19addaa
-
SHA256
a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad
-
SHA512
4b92e5154007e074646752b28d1e3158837c16f0ca57943d1177e879023182fd267aa703061a0573e9c5d687e5ff6d3a8613bc676659faaa45b11ca11303514a
-
SSDEEP
192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2WqGjWF8qa1Dojjgi:mqaCF31cix+Dc4zjTqxFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://116.62.34.159:443/b1hb
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad.exe"C:\Users\Admin\AppData\Local\Temp\a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB