Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-06-2024 22:02
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-19_68ff7ced7e1f9176d44d6df82756f1c0_avoslocker_cobalt-strike.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-19_68ff7ced7e1f9176d44d6df82756f1c0_avoslocker_cobalt-strike.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-06-19_68ff7ced7e1f9176d44d6df82756f1c0_avoslocker_cobalt-strike.exe
-
Size
696KB
-
MD5
68ff7ced7e1f9176d44d6df82756f1c0
-
SHA1
ac827490f38aa5bf2a6516f702b1886124972e7a
-
SHA256
703bf303c629cb4d9ee57d837a41c63457c791f9176588398c4f762aade5401d
-
SHA512
13066328c87c863a97ae360bdb3147d88a9cf9f6488915f9148d373153285264b59e504387f3d00884acb3baf2c78cdb914b5825558f3b9d8725721dbc2f92e6
-
SSDEEP
12288:odEiCwglmAHukMIwa1nxr3+w5HD5Omv1XYW/31IaCbQg7lAEvSWEWneaV0+qRUAO:odZDA/wa1nxr3+wv31IDkg7lVvTq+qlO
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-19_68ff7ced7e1f9176d44d6df82756f1c0_avoslocker_cobalt-strike.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-19_68ff7ced7e1f9176d44d6df82756f1c0_avoslocker_cobalt-strike.exe"1⤵PID:636
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3708 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:81⤵PID:1044