Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
16-04-2024 19:58
Behavioral task
behavioral1
Sample
230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704.exe
Resource
win10v2004-20240412-en
General
-
Target
230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704.exe
-
Size
1.0MB
-
MD5
ee0000e0963e0762fbf314301ec10b20
-
SHA1
a0674f26ebe4255bf57e3d4a427a6bd5fdf43b7b
-
SHA256
230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704
-
SHA512
fd9362275c9ea04aaab3032525e14222b0ee1217cadc58a348ae6741c8c8e19552d75785e2c64c6bfe663f89f8dd77e5822cb237f0d338d325b2fccb00fc2e95
-
SSDEEP
24576:1oXiAT8Sdw01rrb/TmvO90d7HjmAFd4A64nsfJvzj43Sgv6z0r:uXiC8Sdl1rrb/TmvO90d7HjmAFd4A64H
Malware Config
Extracted
cobaltstrike
http://192.168.3.35:80/cFGm
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2368-0-0x0000000002060000-0x0000000002061000-memory.dmpFilesize
4KB