Analysis
- max time kernel
142s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 18:03
Behavioral task
behavioral1
Sample
2024-06-03_72db148b80f22608f47d7f3e95a8ae8f_cobalt-strike_cobaltstrike_snatch.exe
Resource
win7-20240220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_72db148b80f22608f47d7f3e95a8ae8f_cobalt-strike_cobaltstrike_snatch.exe
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
- Target 2024-06-03_72db148b80f22608f47d7f3e95a8ae8f_cobalt-strike_cobaltstrike_snatch.exe
- Size 4.9MB
- Sample240603-wnderaec6s
- SHA256 c6c79831a1442c8783fe2332239be05d0da3d0c2401ea81f3ea39e1d5ed8cd5b
- MD5 72db148b80f22608f47d7f3e95a8ae8f
- SHA1 75aae7177ef87baa90e956ff3ec59548b879c483
- SHA512 8d9d10dfdfdb893ef9e751baf4b59f76806d97bc04842c223637e658f0f8cb280cef14183da65830809911f22bb3c5a8c7a2ed6ce20e9dc5671029c7a65546ca
- SSDEEP 49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpn6:r56utgpPFotBER/mQ32lUg
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-03_72db148b80f22608f47d7f3e95a8ae8f_cobalt-strike_cobaltstrike_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-03_72db148b80f22608f47d7f3e95a8ae8f_cobalt-strike_cobaltstrike_snatch.exe"1⤵PID:3108
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:81⤵PID:4712