Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
01-04-2024 01:48
Static task
static1
Behavioral task
behavioral1
Sample
40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07.exe
Resource
win10v2004-20240226-en
General
-
Target
40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07.exe
-
Size
1.4MB
-
MD5
ce8e1592a4685f349136cb13c12e543f
-
SHA1
fbdccab7f53e063d53dc296c4f1eb7d236a97d46
-
SHA256
40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07
-
SHA512
f00b1d293abf8af9d5833e2b019884bfa9b0618db8172d55d0eb866dbce9f9ba0eecd0bedee0dbc45031abcc89e5ed141ee51f7dedd39f400726aeabb68cedc8
-
SSDEEP
24576:yse92KNwXkWxZiwdMeHRmXKNjhdAT2JSzrSQb92Jco0a:E2K8eexmyj/nCmwo0a
Malware Config
Extracted
cobaltstrike
http://112.124.64.105:7894/Pr8c
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/644-0-0x000001CD63730000-0x000001CD63731000-memory.dmpFilesize
4KB