Analysis
- max time kernel
132s - max time network
103s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
18/05/2024, 01:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
result1.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
result1.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target result1.exe
- Size 3.7MB
- Sample240518-ccph4aeh57
- SHA256 5d972505a8fe39eed3ed7698fb013178850dcd0e7118a57482d48920004f982c
- MD5 f07de60ec6afa06380af7d5015ea68f4
- SHA1 79024b0a2af2b91cd69e5b12a12916f2abcee9a4
- SHA512 624b8a3dc30f3e7a2707ceca064dce85d8ae9fa0b64aca787f4358e7269e361b26ed177518b3d2f04c10d9bf956ae878367bd428114bdad2d27f5d724f58f977
- SSDEEP 49152:JOgbY3Q56s/j/OJpj/oblGsn1IZyWs2a0yNxxrZpG:XN/rwxofQyya04
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://128.199.184.87:9875/Pnf9
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;NLNL)
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.