Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
18-05-2024 18:17
General
-
Target
6f2841ef3df66395d755b353a71e3b4fca3b041aaa431cddf3e42e183cb2780d.exe
-
Size
19KB
-
MD5
020f824108361608b80081491e690690
-
SHA1
0113524bfb929db23efa99e7eae7e7d6ebfa8dc7
-
SHA256
6f2841ef3df66395d755b353a71e3b4fca3b041aaa431cddf3e42e183cb2780d
-
SHA512
2b67d0193a46823f95c24ffdb3f758848293aa6f3b9c606eec93033b16be8098f0ecf58d117eaa3bcbd17fe475dd60dd1946b6b02f38b528cc985acc160600a3
-
SSDEEP
192:TV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Cl//pWF8qa1Dojjgi:9qaCF31cix+Dc4zjl/8FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.1.128:4444/dlT9
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;SVSE)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f2841ef3df66395d755b353a71e3b4fca3b041aaa431cddf3e42e183cb2780d.exe"C:\Users\Admin\AppData\Local\Temp\6f2841ef3df66395d755b353a71e3b4fca3b041aaa431cddf3e42e183cb2780d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB