Analysis

  • max time kernel
    492s
  • max time network
    1596s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    31/03/2024, 13:26

General

  • Target
    Cobra.rar
  • Size 237.5MB
  • Sample240331-qpyt7acd8s
  • SHA256 3d7fa94067c6ccb9200aead7da734babdb3b56bd5aa7448557aecc8ab9a06126
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Cobra.rar
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4288
    • C:\Program Files\7-Zip\7zFM.exe
      "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Cobra.rar"
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:316
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3564
    • C:\Users\Admin\Desktop\Cobra\Cobra RAT.exe
      "C:\Users\Admin\Desktop\Cobra\Cobra RAT.exe"
      1⤵
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      PID:4940

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          user.config

          • Path C:\Users\Admin\AppData\Local\EVLF_-_t.me_evlfdev\Cobra_RAT.exe_Url_lbiucwkwjv2s3ylgbeclyefro2qp5flu\7.1.0.0\user.config
          • Size 789B
          • SHA256 7bd7e628dab53e931d91d3fa8fe68144a51a306cd1a1ff1cb2a1fb3046704008
          • MD5 SHA1 SHA512

          user.config

          • Path C:\Users\Admin\AppData\Local\EVLF_-_t.me_evlfdev\Cobra_RAT.exe_Url_lbiucwkwjv2s3ylgbeclyefro2qp5flu\7.1.0.0\user.config
          • Size 919B
          • SHA256 2346818d89c291b489e829573cd683fdb2d51472ffee617895807ac01472cf5d
          • MD5 SHA1 SHA512

          2024-21-3--11-01-17.html

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\Account Manager\2024-21-3--11-01-17.html
          • Size 5KB
          • SHA256 944dffa82e85969c7adaa9efce8e4d2bbf141b36de24cb3cd05706f23059373b
          • MD5 SHA1 SHA512 SSDEEP

          IMG-21-3-141.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-141.png
          • Size 254KB
          • SHA256 4e7d7e777089d3df4164316d5f55ebf50c3f6786aa14699846ce9c7585fdbbe7
          • MD5 SHA1 SHA512 SSDEEP

          IMG-21-3-146.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-146.png
          • Size 2KB
          • SHA256 ba22547d2fd9745ff1151b4a18ac008718b0bd6d34db678eb3b3e05db21e3ac3
          • MD5 SHA1 SHA512

          IMG-21-3-158.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-158.png
          • Size 2KB
          • SHA256 079fd296fccd56b3a8d1b4cbfedca0eefae43d720c513e17fb7bce99b4ec1f23
          • MD5 SHA1 SHA512

          IMG-21-3-289.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-289.png
          • Size 2KB
          • SHA256 8403c1b7c6e57ec6f8663fe6ae1db6044363775506b681fbd801d1b06a34a7e4
          • MD5 SHA1 SHA512

          IMG-21-3-492.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-492.png
          • Size 6KB
          • SHA256 1fdeada59e920c508c82212965046371692922eddb703bf17b9c7ba55074efcd
          • MD5 SHA1 SHA512 SSDEEP

          IMG-21-3-604.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-604.png
          • Size 2KB
          • SHA256 e316aa8c57f166c5982e300f547e2ba7ee4160aba0171c7f663b4b2f150e8f4e
          • MD5 SHA1 SHA512

          IMG-21-3-766.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\Client-0ee233c67560b48c\ScreenShots\IMG-21-3-766.png
          • Size 2KB
          • SHA256 9ab11a2285fb728e1c002581e2029e888af7d8eff3a0ad7d4e4772529517af68
          • MD5 SHA1 SHA512

          2024-21-3--10-18-31.html

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\null-e7f0ec8b-bf1d-4df8-abc4-6b0c59f62df5\SMS Manager\2024-21-3--10-18-31.html
          • Size 23KB
          • SHA256 27a58a38042a0ed6eecc4afe219b56bcb02ffadfb5b509a0fb2519089d799a7c
          • MD5 SHA1 SHA512 SSDEEP

          user.info

          • Path C:\Users\Admin\AppData\Local\Temp\7zEC3169308\Cobra\res\Users\null-e7f0ec8b-bf1d-4df8-abc4-6b0c59f62df5\user.info
          • Size 20B
          • SHA256 69703746d5f969a4427f2f3d93d94f3bb6b4e90c6a118acc1306965cc55c039b
          • MD5 SHA1 SHA512

          Cobra RAT.exe

          • Path C:\Users\Admin\Desktop\Cobra\Cobra RAT.exe
          • Size 61.7MB
          • SHA256 95be9bdbb225cc7d3114b46d2b9445bba5db6e7689404301bb7428421a711676
          • MD5 SHA1 SHA512 SSDEEP

          DrakeUI.Framework.dll

          • Path C:\Users\Admin\Desktop\Cobra\DrakeUI.Framework.dll
          • Size 1.6MB
          • SHA256 70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
          • MD5 SHA1 SHA512 SSDEEP

          GeoIPCitys.dll

          • Path C:\Users\Admin\Desktop\Cobra\GeoIPCitys.dll
          • Size 191KB
          • SHA256 d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
          • MD5 SHA1 SHA512 SSDEEP

          LiveCharts.WinForms.dll

          • Path C:\Users\Admin\Desktop\Cobra\LiveCharts.WinForms.dll
          • Size 19KB
          • SHA256 a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad
          • MD5 SHA1 SHA512 SSDEEP

          LiveCharts.Wpf.dll

          • Path C:\Users\Admin\Desktop\Cobra\LiveCharts.Wpf.dll
          • Size 212KB
          • SHA256 1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
          • MD5 SHA1 SHA512 SSDEEP

          LiveCharts.dll

          • Path C:\Users\Admin\Desktop\Cobra\LiveCharts.dll
          • Size 148KB
          • SHA256 9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
          • MD5 SHA1 SHA512 SSDEEP

          Pass.inf

          • Path C:\Users\Admin\Desktop\Cobra\res\Config\Pass.inf
          • Size 24B
          • SHA256 b19546f348a014da6c9939ad8838f726409f4bc456b2a9e9a22ae3437c90ffd7
          • MD5 SHA1 SHA512

          -1.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\-1.ico
          • Size 33KB
          • SHA256 e10518132ded7ee51739953121f6efe77412aa85bd744ea7b256a5a6da751e44
          • MD5 SHA1 SHA512 SSDEEP

          AD.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AD.ico
          • Size 33KB
          • SHA256 ffd5e4016c4bc247f49ded9d4ac463e7bd9d7f92c9889528f5f3a865dc8234e2
          • MD5 SHA1 SHA512 SSDEEP

          AE.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AE.ico
          • Size 33KB
          • SHA256 0759c987d55b3e2bc78ea1761d451b0b40928865c5b5652ef7b304426bc1dab9
          • MD5 SHA1 SHA512 SSDEEP

          AF.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AF.ico
          • Size 33KB
          • SHA256 ecf99e08bf15aca4325c4790ee20ccc674b6f4fc6dbbef0885f36bf8e6e8aa68
          • MD5 SHA1 SHA512 SSDEEP

          AG.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AG.ico
          • Size 33KB
          • SHA256 8e36c85a8ba6b92ea906d4dcda412b492449e668fac3b05f5fc512118fa71e5f
          • MD5 SHA1 SHA512 SSDEEP

          AI.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AI.ico
          • Size 33KB
          • SHA256 08afe88e8a0475e320c6da70ff530ada3a6fb426051a6337a769c14dc37ae316
          • MD5 SHA1 SHA512 SSDEEP

          AL.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AL.ico
          • Size 33KB
          • SHA256 8f726d2132b2b7764936aaffb52ef7b0271abf857949588c36b32fb3c769bcc4
          • MD5 SHA1 SHA512 SSDEEP

          AM.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AM.ico
          • Size 33KB
          • SHA256 faf3d661a09912ff0c1f6cc92dd8775c3d2be31e9a72fe0962c144d679021d86
          • MD5 SHA1 SHA512 SSDEEP

          AN.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AN.ico
          • Size 33KB
          • SHA256 8f641c948721c9e7e92f28224b8b1beeb27382e5bac8a4014a57537dd7543a8d
          • MD5 SHA1 SHA512 SSDEEP

          AO.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AO.ico
          • Size 33KB
          • SHA256 550a1b6e2b97febd865cd130b0c0d484cf2fd02b8066ddf6d7290b9cffb35059
          • MD5 SHA1 SHA512 SSDEEP

          AQ.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AQ.ico
          • Size 33KB
          • SHA256 3439ebcdd8e7a614f157f58d7f77d190aac7fe514129a01024a8b68b7008fbb2
          • MD5 SHA1 SHA512 SSDEEP

          AR.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AR.ico
          • Size 33KB
          • SHA256 af2f591584f6c59da15fd42e5175dc136844442e1c755fac047b0efae3956c50
          • MD5 SHA1 SHA512 SSDEEP

          AS.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AS.ico
          • Size 33KB
          • SHA256 4946c58e14318696ea03cf9bcb5d8a7334273c2f9e30173a3c7ae0bb7ee70bc4
          • MD5 SHA1 SHA512 SSDEEP

          AT.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AT.ico
          • Size 33KB
          • SHA256 236c59500b9bd83212375ca7514c0d62dc088203ed269e9cd55ca6349adbc8f0
          • MD5 SHA1 SHA512 SSDEEP

          AU.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AU.ico
          • Size 33KB
          • SHA256 047f9bd82ca7e2685c1dca4c065209977b5e8c32f78ee821bcc7aba12decb044
          • MD5 SHA1 SHA512 SSDEEP

          AW.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AW.ico
          • Size 33KB
          • SHA256 f0d730a0d8ce85f049a6d8a52733c506a8cf48584b18838f3d677b09d9c09b52
          • MD5 SHA1 SHA512 SSDEEP

          AX.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AX.ico
          • Size 33KB
          • SHA256 5ac8c61a8ad2d7ecc3e76927fd6d52b4f279c4d3a92dd32715395581c4615423
          • MD5 SHA1 SHA512 SSDEEP

          AZ.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\AZ.ico
          • Size 33KB
          • SHA256 d3cc5eeabeae7f54a8c5600b5c2354b355492634031e32e8ba981806b0494b61
          • MD5 SHA1 SHA512 SSDEEP

          BA.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BA.ico
          • Size 33KB
          • SHA256 b586dd987bd326d24ad3edddd1f649d2fc49eaf96028e62e6e14208591a31a9b
          • MD5 SHA1 SHA512 SSDEEP

          BB.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BB.ico
          • Size 33KB
          • SHA256 f679b5b2dfe2c980b55b713a025936c10260db10254391c5b66dcec51dd97705
          • MD5 SHA1 SHA512 SSDEEP

          BD.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BD.ico
          • Size 33KB
          • SHA256 f8d767b5e74cde08d614d64bc51f4d9db90dc056dba1c38ad8b21aa6c598a286
          • MD5 SHA1 SHA512 SSDEEP

          BE.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BE.ico
          • Size 33KB
          • SHA256 bd0eefab4e51b0beae22d4557f8c43e2908c39b23158900d9c3d38d4a3c27b2d
          • MD5 SHA1 SHA512 SSDEEP

          BF.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BF.ico
          • Size 33KB
          • SHA256 5f865103ca695247ab7ea7e02a1942ef01cd65120973e17fa3fcc3e59f9f7eb9
          • MD5 SHA1 SHA512 SSDEEP

          BG.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BG.ico
          • Size 33KB
          • SHA256 426c8b630bdc5916c5a687450e90a265d18a1042111c7f26a5a7d85d143044ad
          • MD5 SHA1 SHA512 SSDEEP

          BH.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BH.ico
          • Size 33KB
          • SHA256 2525fc71eb284013f3add2f13578363e8030ed41fec3a7fd599a96b2a8ba0d70
          • MD5 SHA1 SHA512 SSDEEP

          BI.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BI.ico
          • Size 33KB
          • SHA256 84145ca9e4595bdd4838af891ca65f3b88f4ce830f867b6d4f821780152b9c16
          • MD5 SHA1 SHA512 SSDEEP

          BJ.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BJ.ico
          • Size 33KB
          • SHA256 569c37c33bf5fe84cf1766c26c531be1398e80585551cd065dfb8dd62a57b608
          • MD5 SHA1 SHA512 SSDEEP

          BL.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BL.ico
          • Size 33KB
          • SHA256 8165efe84da8f10193cadb266016cfb6ca87724614d00c70495a7b9afc172caf
          • MD5 SHA1 SHA512 SSDEEP

          BM.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BM.ico
          • Size 33KB
          • SHA256 7f33f4d7cdbe5ac4745917badc34bb93d38a8e5abff6bcdc0c76d3171baf275a
          • MD5 SHA1 SHA512 SSDEEP

          BN.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BN.ico
          • Size 33KB
          • SHA256 9cb1449764b3abaae85b2edb0e39afb9776e4c662591f3b241b741a502bb777b
          • MD5 SHA1 SHA512 SSDEEP

          BO.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BO.ico
          • Size 33KB
          • SHA256 a74d0a96d71485df49614b77a3a232af0c0984443cf2a3efd30d2a9b367271f6
          • MD5 SHA1 SHA512 SSDEEP

          BR.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BR.ico
          • Size 33KB
          • SHA256 29be53093407af0aa165535b196cd3233e19903e7d07c7487c3590feaf3806dd
          • MD5 SHA1 SHA512 SSDEEP

          BS.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BS.ico
          • Size 33KB
          • SHA256 2f2cf7125492eb037d8c5bfa15c1584ad8b55047f46e5052b142674ce10e95c4
          • MD5 SHA1 SHA512 SSDEEP

          BT.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BT.ico
          • Size 33KB
          • SHA256 ea70f8f17623daf8128eeee0fd9b91d942d928e5b20da5e1bbc7a5d7a4be5e1f
          • MD5 SHA1 SHA512 SSDEEP

          BW.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BW.ico
          • Size 33KB
          • SHA256 9c1c1186d19dd5c439351fcb756df877c4ea351dbf4aac1de226b98b3053ff01
          • MD5 SHA1 SHA512 SSDEEP

          BY.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BY.ico
          • Size 33KB
          • SHA256 de9fb648d544aee8166232826f3ddf7973d957eedb70ce5100df5a969d7a6cc7
          • MD5 SHA1 SHA512 SSDEEP

          BZ.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\BZ.ico
          • Size 33KB
          • SHA256 627bbd8aefb32eb4bd11c2519ad35427d5627bdbd54b68119827990ef66b4180
          • MD5 SHA1 SHA512 SSDEEP

          CA.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CA.ico
          • Size 33KB
          • SHA256 642b7b575255c44fa96167b1268e69f2fa72e76d62aa8f15768eeebdd45d11d2
          • MD5 SHA1 SHA512 SSDEEP

          CC.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CC.ico
          • Size 33KB
          • SHA256 4c13e537ae62cfd9e6bf1690ad6fd7a0444ccdbebf9f29478c0238ba60c4bc58
          • MD5 SHA1 SHA512 SSDEEP

          CD.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CD.ico
          • Size 33KB
          • SHA256 50f6609606763761767bbbcaa7f845644a15612fd7a9228c384729691a14b350
          • MD5 SHA1 SHA512 SSDEEP

          CF.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CF.ico
          • Size 33KB
          • SHA256 29218dbf97371f2d0282388a8c1f18df0cd59cff572e9a1d3833fa30dfca1210
          • MD5 SHA1 SHA512 SSDEEP

          CG.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CG.ico
          • Size 33KB
          • SHA256 8caaf67c31afba8703fbfb04a416e54720a7f015897daa733bd9d89ab55e7c63
          • MD5 SHA1 SHA512 SSDEEP

          CH.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CH.ico
          • Size 33KB
          • SHA256 c712b3b71aab3fd48b7d0256430b3177106a7bf5ec93d1ca39a912d6f5f9d877
          • MD5 SHA1 SHA512 SSDEEP

          CI.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CI.ico
          • Size 33KB
          • SHA256 b682dbdd522f2b9e3edb7e2bc80fb82b973f6c913bf2c5992893d26a7b777e6c
          • MD5 SHA1 SHA512 SSDEEP

          CK.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CK.ico
          • Size 33KB
          • SHA256 e17e1e1611e1de28707872a2287a45d108a48c9f6fd00574def682dd2fad0beb
          • MD5 SHA1 SHA512 SSDEEP

          CL.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CL.ico
          • Size 33KB
          • SHA256 ca76382bc3d8fc37de4f5b957a50e7f4c85afbdf990207c698dd8a28cbfba700
          • MD5 SHA1 SHA512 SSDEEP

          CM.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CM.ico
          • Size 33KB
          • SHA256 20ba53d3c0953eb1c47842270d4fba6f7a514087fc0d16400df7cb033c75cd8f
          • MD5 SHA1 SHA512 SSDEEP

          CN.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CN.ico
          • Size 33KB
          • SHA256 cb888a7fefc252365abc4ca04ff5e6704d1e70e7b19c282907085ec4ef461348
          • MD5 SHA1 SHA512 SSDEEP

          CO.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CO.ico
          • Size 33KB
          • SHA256 6c255557f7d096c47fe2e7d12ddc95d2f143b1c8c42bdc1121e951dd5c306d4b
          • MD5 SHA1 SHA512 SSDEEP

          CR.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CR.ico
          • Size 33KB
          • SHA256 c8eba9ba7479ed1675eae586687781d98c41edf3e9c29078ff849c17c8b43dc5
          • MD5 SHA1 SHA512 SSDEEP

          CU.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CU.ico
          • Size 33KB
          • SHA256 8aa8589840ca738bf96233824b26d4af82f20c4db5feb554eb9c1bf4b0655a0c
          • MD5 SHA1 SHA512 SSDEEP

          CV.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CV.ico
          • Size 33KB
          • SHA256 20b47c8ed6cef15198f758be3ceb8a54441eda8a4b0c61634a8b73d06654b187
          • MD5 SHA1 SHA512 SSDEEP

          CW.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CW.ico
          • Size 33KB
          • SHA256 84bc2d33f86ca81cb3ab49d4cc2e8cc442432e1ac18e9b5eb2b171990eb272fb
          • MD5 SHA1 SHA512 SSDEEP

          CX.ico

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\Flags\CX.ico
          • Size 33KB
          • SHA256 7cde6d26b7500044126103bd8af0becb27bc82e4a0de8417b71c07b02dadff10
          • MD5 SHA1 SHA512 SSDEEP

          GeoIP.dat

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\GeoIP.dat
          • Size 1.1MB
          • SHA256 681ede512fe7ac21e976c754bfc1e1a75a9e02c3d931ce6849cfaa9d4080338a
          • MD5 SHA1 SHA512 SSDEEP

          GeoIPCity.dat

          • Path C:\Users\Admin\Desktop\Cobra\res\GeoIP\GeoIPCity.dat
          • Size 25.6MB
          • SHA256 bf41a0a700e3b35415609d090b15c5355e5cf4ca703ab119626b2d450997c608
          • MD5 SHA1 SHA512 SSDEEP

          memory/4940-1454-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1442-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1453-0x0000021300970000-0x0000021300B16000-memory.dmp

          memory/4940-1451-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1450-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1447-0x00000213646F0000-0x000002136471C000-memory.dmp

          memory/4940-1449-0x000002137CF90000-0x000002137CFCC000-memory.dmp

          memory/4940-1445-0x00000213646A0000-0x00000213646BC000-memory.dmp

          memory/4940-1444-0x0000021364670000-0x000002136467C000-memory.dmp

          memory/4940-1456-0x000002130C000000-0x000002130C036000-memory.dmp

          memory/4940-1514-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1515-0x00007FFBF1470000-0x00007FFBF1E5C000-memory.dmp

          memory/4940-1516-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1517-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1518-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1519-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1520-0x0000021364730000-0x0000021364740000-memory.dmp

          memory/4940-1441-0x000002135EB00000-0x00000213628BA000-memory.dmp

          memory/4940-1440-0x00007FFBF1470000-0x00007FFBF1E5C000-memory.dmp

          memory/4940-1535-0x00007FFBF1470000-0x00007FFBF1E5C000-memory.dmp