Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-04-2024 22:32

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-04-24_c142f1ced276487f2a995d580d145fde_andromeda_aspxspy_bisonal_china-chopper_cobalt-strike_su.exe command="C:\Users\Admin\AppData\Local\Temp\2024-04-24_c142f1ced276487f2a995d580d145fde_andromeda_aspxspy_bisonal_china-chopper_cobalt-strike_su.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    2024-04-24_c142f1ced276487f2a995d580d145fde_andromeda_aspxspy_bisonal_china-chopper_cobalt-strike_su.exe

  • Size

    4.9MB

  • MD5

    c142f1ced276487f2a995d580d145fde

  • SHA1

    32b10994db98aee817e557eff6537ae1ceb9004b

  • SHA256

    bdd3f9dc758b9ee2b902744296375495593b4ccb97de07fc318724a8518bc0c3

  • SHA512

    f0d2e4cb3f70a001619bba0d4d520189c44b7943eef24a34b573f2ab0263e3cfe0e3de56726c4ca256dc3e48b147583d2607886c7aa885dab5eb6f71a3b97265

  • SSDEEP

    24576:Nzd9gfpaixnVyYvIK9SG26i42qoZyR7aPIa0faixnVyYoyy4hIagmrUGmbnUx5UM:Nzd9aHcYi42qoZGaP0HIRmObnUx5EA

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-24_c142f1ced276487f2a995d580d145fde_andromeda_aspxspy_bisonal_china-chopper_cobalt-strike_su.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-24_c142f1ced276487f2a995d580d145fde_andromeda_aspxspy_bisonal_china-chopper_cobalt-strike_su.exe"
    1⤵
      PID:3136

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads