Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10-04-2024 14:57
General
-
Target
f5fd02ebd2376fd1bc1ff121e9bfda618755a5c049edc8a4288eb67eb1cc7f9b.exe
-
Size
184KB
-
MD5
ea8b7985d8d87460fa4576526c837260
-
SHA1
d164dcd8d7dd0d8eefc727f959c2a1502e6197f1
-
SHA256
f5fd02ebd2376fd1bc1ff121e9bfda618755a5c049edc8a4288eb67eb1cc7f9b
-
SHA512
0410569aecdf92680ec0db3955c10920e6a37f8f22822a52e4ae9f492f15b4e99c42fbf6c7496f6e71be344137518364bf86f332918ecd1d21d393b4b7908434
-
SSDEEP
3072:bwCHCyuae5vyTrOox8gU4oTuHVadDDrPN74ZIomYxoLmMJhKI:bwCHvua6ToxVPGDDz11onxoyo
Score
10/10
Malware Config
Extracted
Family
colibri
Version
1.2.0
Botnet
traffic1
C2
http://188.130.139.47/gate.php
rc4.plain
Signatures
-
Colibri Loader
A loader sold as MaaS first seen in August 2021.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5fd02ebd2376fd1bc1ff121e9bfda618755a5c049edc8a4288eb67eb1cc7f9b.exe"C:\Users\Admin\AppData\Local\Temp\f5fd02ebd2376fd1bc1ff121e9bfda618755a5c049edc8a4288eb67eb1cc7f9b.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
32KB
-
Filesize
28KB
-
Filesize
68KB
-
Filesize
28KB
-
Filesize
28KB