Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
24-05-2024 16:39
General
-
Target
97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831.exe
-
Size
19KB
-
MD5
96cedbf9d4d4698027c8a4aa1a950278
-
SHA1
44369e28de8b47681d76d9e0e6c84a54ba11f0fb
-
SHA256
97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831
-
SHA512
63faa10bf018eb6bc4c2a23ea73ce0c8c9e95e6eec9efee09b1ebfdf1b4deb4102a7dc0f1ba88ebbdc12f6bb1faa83727fe8dd7290f530eb2cacd2a398f1198f
-
SSDEEP
192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2q9YTwWF8qa1Dojjgi:uqaCF31cix+Dc4zjp90FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.8.128:8080/lJv1
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831.exe"C:\Users\Admin\AppData\Local\Temp\97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB