Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 11:41
Static task
static1
Behavioral task
behavioral1
Sample
oracle.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
oracle.exe
Resource
win10v2004-20240508-en
General
-
Target
oracle.exe
-
Size
19KB
-
MD5
6e92349a28f041ca81ad5020ab80f04a
-
SHA1
912906275cfdb89d7846f926757673826143bc5e
-
SHA256
90292aa0da2d527f67757d9ceaabeb554445b93de98bd2cdf36f1436f1050094
-
SHA512
8355cf345c234a0571960dc1fc60587e2a3fbd3cfffe2554b8ec424003e3a1dd4a15164b97113c227114a308250cd69e091977a12ffac7afb8801cfe72ee0d4e
-
SSDEEP
192:iV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ufJGyXXWF8qa1Dojjgi:sqaCF31cix+Dc4zjLf4yWFF46gi
Malware Config
Extracted
cobaltstrike
http://110.42.189.52:81/Il4t
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Touch)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.