Overview

overview

10

Static

static

3

a8d417116b...e1.exe

windows7-x64

1

a8d417116b...e1.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 13:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1.exe

  • Size

    1.4MB

  • MD5

    e0aab13d8d2143ebff66a5acbcabdb02

  • SHA1

    5b57362a3f766a55b6e3eafe2bf35061876d9bee

  • SHA256

    a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1

  • SHA512

    e9378ded057f633273dfa59579328e7079352caa8c1f2b86b814b8b46e94889a17e2869f48c6b9f3e065bb4d792d5225f7e422f014b6f4fee1ead099a028fc66

  • SSDEEP

    12288:98NgAn7lJtv7K9Yi/QNm5+ojBqB+GiTK25/j15wHT+MS6cxi+oV0c+Eroo3ujWWE:98NjnZJ9e9Yi/T5+oTvjQ6M6j3JWVrT

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.36.105.186:443/detect/applet/GZA1UH6C9W9R

Attributes
  • user_agent

    Accept: application/json, image/*, application/xml Accept-Language: es-gt Accept-Encoding: *, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1.exe
    "C:\Users\Admin\AppData\Local\Temp\a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1.exe"
    1⤵
      PID:2108
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4316,i,15721081447618313297,6839074028983272033,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
      1⤵
        PID:4432

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2108-0-0x000001DC52AA0000-0x000001DC52AA1000-memory.dmp

        Filesize

        4KB

        Download