Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-04-2024 10:18
General
-
Target
ff62a4c67fac4e7a5b6009b724d682c25699f1b9be6deaed723ea5d883f2fc9b.exe
-
Size
19KB
-
MD5
bf7377591f41478bab11da363dd771a0
-
SHA1
4758b0538326491ff7e5f6045ff7d0d88e1ec6ca
-
SHA256
ff62a4c67fac4e7a5b6009b724d682c25699f1b9be6deaed723ea5d883f2fc9b
-
SHA512
48247dcb709da88f4bd6bb145910d806f645fbfab624bbd6c15ab75cc08473fe1f6d0e20d055124a345796923c3f658a0536d8b28c1a7b8aba1a81097c450668
-
SSDEEP
192:vV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZEmh+WF8qa1Dojjgi:pqaCF31cix+Dc4zjRm1FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.34.32:80/Cz1o
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENXA)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff62a4c67fac4e7a5b6009b724d682c25699f1b9be6deaed723ea5d883f2fc9b.exe"C:\Users\Admin\AppData\Local\Temp\ff62a4c67fac4e7a5b6009b724d682c25699f1b9be6deaed723ea5d883f2fc9b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB