Overview

overview

10

Static

static

3

1c902d75b2...7c.exe

windows7-x64

10

1c902d75b2...7c.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-04-2024 10:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c.exe

  • Size

    19KB

  • MD5

    0f1f71a02c33abee970683e14b1f1a15

  • SHA1

    47a5fc8e800ac7b5d69165e99a227e2cc8a486cc

  • SHA256

    1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c

  • SHA512

    7636f66c416746012d74fb8b5d6e2ec97059ba88b3d9eb2f0f50c007e7b8b4ef7a014c03258c21b4cc6bd224aa75fcd67b145a7d28c279fb9b8afdbdbd714e73

  • SSDEEP

    192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZP3sJzdRYSWF8qa1Dojjgi:PqaCF31cix+Dc4zjOP3sd+FF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.112:80/vi9E

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c.exe
    "C:\Users\Admin\AppData\Local\Temp\1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c.exe"
    1⤵
      PID:244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/244-0-0x0000000000020000-0x0000000000021000-memory.dmp
      Filesize

      4KB

      Download
    • memory/244-1-0x0000000000400000-0x000000000040C000-memory.dmp
      Filesize

      48KB

      Download