Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23-05-2024 10:37
General
-
Target
28e16516ee3187201fcdde43ab8c92b3b95d970c1d36659dd6564fe1905d40b0.exe
-
Size
1.4MB
-
MD5
ced909ecd50d11e490aa95e57d13e540
-
SHA1
0c512c9f35047b8c5644079fd1c834ff7df6836a
-
SHA256
28e16516ee3187201fcdde43ab8c92b3b95d970c1d36659dd6564fe1905d40b0
-
SHA512
1de06da03f78bd7bac276fce0fac21662dbe6d1c0032c74d52208a4dd9c602e88ff337afb81c4d9565b96d58f78fc6cd9432e9e7abcaad8f4ac5ef9e501a76be
-
SSDEEP
24576:YSCDBagzhBqRkNyVRZCwfsM8YRhLAa6tV0/HPox:xCBagdyNT8YRma60o
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://118.25.150.165:83/QLfZ
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAM2)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\28e16516ee3187201fcdde43ab8c92b3b95d970c1d36659dd6564fe1905d40b0.exe"C:\Users\Admin\AppData\Local\Temp\28e16516ee3187201fcdde43ab8c92b3b95d970c1d36659dd6564fe1905d40b0.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB