Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 01:44
Behavioral task
behavioral1
Sample
2024-05-21_06f4de71f83e67abee02b8cd5e0467aa_cobalt-strike_cobaltstrike.exe
Resource
win7-20240220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
2024-05-21_06f4de71f83e67abee02b8cd5e0467aa_cobalt-strike_cobaltstrike.exe
-
Size
6.0MB
-
MD5
06f4de71f83e67abee02b8cd5e0467aa
-
SHA1
bd8eff3080ccc5b0d74421993e0f1dc15e0a036c
-
SHA256
5a4dd42687135133c0b1a500be7280b201a16183d373c65ff8db3236337dc90f
-
SHA512
154a33d27fef1653d8a3d0f6ef281c1393129e6365c2920d6a23dc05dd5f66f20b8506da3a822422b379ed3ba15dd91563ffa21d25ed6b005325ae77c452767b
-
SSDEEP
98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lUp:E+v56utgpPF8u/7p
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
Processes:
resource yara_rule behavioral2/memory/2508-0-0x00007FF729400000-0x00007FF729754000-memory.dmp UPX -
XMRig Miner payload 2 IoCs
Processes:
resource yara_rule behavioral2/memory/2508-0-0x00007FF729400000-0x00007FF729754000-memory.dmp xmrig behavioral2/memory/2508-1-0x00007FF729400000-0x00007FF729754000-memory.dmp xmrig -
Processes:
resource yara_rule behavioral2/memory/2508-0-0x00007FF729400000-0x00007FF729754000-memory.dmp upx