Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 02:12
General
-
Target
2024-05-22_a33c876ca4008ef224048c05f5e89bb6_avoslocker_cobalt-strike.exe
-
Size
797KB
-
MD5
a33c876ca4008ef224048c05f5e89bb6
-
SHA1
17d47df5f0602dbdc344c759ac930f0fb3cedd0b
-
SHA256
e9e1f2cd930f68e73a0e253edc551c9474318d8a46ec126fa5ecea3ff524fcf0
-
SHA512
2118340fca2cfd6d7ad717f20a2f2e755017f07b59a5fdc17d1209037c236726abbf31aafc22b7ca530f4dba06fa617074e2055864e07cb50a45c12bd2fa49c4
-
SSDEEP
24576:WFpElaeo2S10AbBjTZXh4KTKK4KKOQK5VcZ1EEVmEEE1EEEEEEEEEEEsKK1KKK1X:8YAbBNSKTKK4KKOQK5VcZ1EEVmEEE1Ex
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_a33c876ca4008ef224048c05f5e89bb6_avoslocker_cobalt-strike.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_a33c876ca4008ef224048c05f5e89bb6_avoslocker_cobalt-strike.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage