Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-04-2024 16:22
General
-
Target
5f9e20461f9a46c0fd33fd18bd7105e12208837655aacebe1e2b1b03effdf3e0.exe
-
Size
19KB
-
MD5
6d28bb5f7863e681199188cd82914b7c
-
SHA1
b47e0b37f6823b75221166013082da028ea4c8c7
-
SHA256
5f9e20461f9a46c0fd33fd18bd7105e12208837655aacebe1e2b1b03effdf3e0
-
SHA512
64bd929cd0a95370940f5ca4b9bc1179b9334dcbf5209f67f0b05beadbe82b825fccc285fd830b9d199b4265799d9c273b7984d2d41807551c5476651aa8e72e
-
SSDEEP
192:vV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2BxEXWF8qa1Dojjgi:pqaCF31cix+Dc4zjaEmFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://39.104.232.76:25000/iiT7
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; ASU2JS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f9e20461f9a46c0fd33fd18bd7105e12208837655aacebe1e2b1b03effdf3e0.exe"C:\Users\Admin\AppData\Local\Temp\5f9e20461f9a46c0fd33fd18bd7105e12208837655aacebe1e2b1b03effdf3e0.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB