General
-
Target
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509
-
Size
12KB
-
Sample
240417-x7st8adb51
-
MD5
e409740ca973a2374a137b62622261f2
-
SHA1
fbd8b7950064d2424e42b5293c7658ce14eac713
-
SHA256
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509
-
SHA512
17e916132794bbf465281b59e7ba39f5cdf663496cda37b90faeca2c2729fc28326f07d52b7bb0fc33f91cf0279821c542cbcac5347b2b0f8db3072943cf4b9b
-
SSDEEP
192:izTyH59ZEOGECXOh7nsrdnD1QW6jOMeS09iL03DyIjJRtdt:izTyH2PSsrt18jxlIWIPtn
Behavioral task
behavioral1
Sample
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509.dll
Resource
win10v2004-20240412-en
Malware Config
Extracted
cobaltstrike
http://192.168.132.130:12345/3vhL
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Targets
-
-
Target
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509
-
Size
12KB
-
MD5
e409740ca973a2374a137b62622261f2
-
SHA1
fbd8b7950064d2424e42b5293c7658ce14eac713
-
SHA256
5327aaa8ae666d71d5e05932d348b7c78a2cc5abb927a1036f90a444d06ab509
-
SHA512
17e916132794bbf465281b59e7ba39f5cdf663496cda37b90faeca2c2729fc28326f07d52b7bb0fc33f91cf0279821c542cbcac5347b2b0f8db3072943cf4b9b
-
SSDEEP
192:izTyH59ZEOGECXOh7nsrdnD1QW6jOMeS09iL03DyIjJRtdt:izTyH2PSsrt18jxlIWIPtn
Score10/10-
Suspicious use of SetThreadContext
-