Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-05-2024 14:03
General
-
Target
Session.exe
-
Size
19KB
-
MD5
cb67537ad9beafe9cac0b24ee41f4470
-
SHA1
dbbd990870c911545697c2389eaa2c11d3ab286e
-
SHA256
1a84fcbdb477c07883edf49d32754c173df5f451bc22af113cb241987af96ace
-
SHA512
0fcc75d2026d371d83dc12f1673323594d29338bb711a048a41a887e88d8ab6e869fd6daa4f35d685b03e592546106cee0eb702c11012b4a908bc9475e03b766
-
SSDEEP
192:NeV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2gaWF8qa1Dojjgi:NoqaCF31cix+Dc4zjdFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://193.117.208.148:7800/zQLF
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;SVSE)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Session.exe"C:\Users\Admin\AppData\Local\Temp\Session.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB