Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 04:22
Static task
static1
Behavioral task
behavioral1
Sample
acc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
acc.exe
Resource
win10v2004-20240426-en
General
-
Target
acc.exe
-
Size
17KB
-
MD5
cab708fcf7a0b66f237e687f84b78e4d
-
SHA1
e6240dc4814ca2fd4e851dedbbb833feed5457c7
-
SHA256
deb9971765f4382a53671193753ce3030d45d4e398875d677e66574f616aac40
-
SHA512
1d48f2fb6f9f11235e557a50be7c25b59d5776ba1bcdf0a0006220f33cd94243e175ba2ff422db89af198e99224ad11f0cd6f78164e36ad60301ea2374e09624
-
SSDEEP
192:yDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4YxB96BUbOj6kxiY:yDMAoKz6WtKEj7aBDi9xj6bAY
Malware Config
Extracted
cobaltstrike
http://206.188.197.218:80/rc9O
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.