Analysis
-
max time kernel
146s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
17-04-2024 20:01
Static task
static1
Behavioral task
behavioral1
Sample
artifact_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
artifact_x64.exe
Resource
win10v2004-20240412-en
General
-
Target
artifact_x64.exe
-
Size
19KB
-
MD5
d67e94df87700a0d3da13f50f56ddb56
-
SHA1
b2c5336ca6f7ace1071a4eeed5f785c1c33bc2c6
-
SHA256
819a2a78732fa371bf0a2c3bde17e0c9890a16f9f3285c48b44beea770d4239b
-
SHA512
871b7b851a323bde15237aa2276a3e3f34af18e9641b058fde0ffcd6fb5b5661b5c3fa92d55f173519ad85219297cd65b4f183c4fb4f5ff71077ba4966eb3239
-
SSDEEP
192:2V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2VcCWF8qa1Dojjgi:QqaCF31cix+Dc4zjouFF46gi
Malware Config
Extracted
cobaltstrike
http://192.168.180.11:7700/zbJ7
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.