Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
18-05-2024 12:33
General
-
Target
2024-05-18_9213c2868f92abddd6b75720d1daa920_snatch.exe
-
Size
4.5MB
-
MD5
9213c2868f92abddd6b75720d1daa920
-
SHA1
9293ac2aad272da89e6fd549d88fc4ac522fb7ab
-
SHA256
860919a5cdf1edd07e9ccf5c7170aaf370c2a64d35c65c411dbf4cdfd611fd92
-
SHA512
8cea1cd48523b84850882a905a2aaea466e963cbf09990164588641d679cdd6912b87eea278ac58f1d641e8bf78d87e7516a6b93fecab43b6c086fe7c315c081
-
SSDEEP
49152:gtaCVuQDjpIqaGyzc6ihGqh8BRyn602M+jAmTfKdV76LrPFh0FM4S5g+A/:mbjCqaGSihGqh8KO+b7qd6V+A
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://119.3.90.227:8888/Vcq3
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-18_9213c2868f92abddd6b75720d1daa920_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-18_9213c2868f92abddd6b75720d1daa920_snatch.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB