Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
23-04-2024 08:14
Static task
static1
Behavioral task
behavioral1
Sample
8fa4bff30b5a304b35f0800e7d34b04c6b06cd2fe2f718e69744c4dc4ea32525.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8fa4bff30b5a304b35f0800e7d34b04c6b06cd2fe2f718e69744c4dc4ea32525.exe
Resource
win10v2004-20240412-en
General
-
Target
8fa4bff30b5a304b35f0800e7d34b04c6b06cd2fe2f718e69744c4dc4ea32525.exe
-
Size
19KB
-
MD5
b477a29dec4654a5feb7e0d41d88870b
-
SHA1
399104478749ea39dbb99fc0f7f90e8a54ba0c7d
-
SHA256
8fa4bff30b5a304b35f0800e7d34b04c6b06cd2fe2f718e69744c4dc4ea32525
-
SHA512
8b4dd7e91569b75637360a4a50a73d3183978e560d4c2006463ac4c4b9b79aa24ecfc52583e50b80f4d26c76995ae8803c413f3d866876feff1810ceed3bfc25
-
SSDEEP
192:UV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/20SWF8qa1Dojjgi:GqaCF31cix+Dc4zj3FF46gi
Malware Config
Extracted
cobaltstrike
http://192.168.111.130:80/9ycH
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.