Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 13:22
Static task
static1
Behavioral task
behavioral1
Sample
5b6b1b8f58313d1edc1bb3f6d2d636a7e86ee435508c1894985b343d97552081.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5b6b1b8f58313d1edc1bb3f6d2d636a7e86ee435508c1894985b343d97552081.exe
Resource
win10v2004-20240508-en
General
-
Target
5b6b1b8f58313d1edc1bb3f6d2d636a7e86ee435508c1894985b343d97552081.exe
-
Size
19KB
-
MD5
9c924470fdd909018bdc3e0e5fe9b83f
-
SHA1
73e2eb39667c0d0fcac714ed9618496dcb24be3f
-
SHA256
5b6b1b8f58313d1edc1bb3f6d2d636a7e86ee435508c1894985b343d97552081
-
SHA512
2fd63ce2300477aefd137435711467700ce9acb1e82c94b747331ace998b46a078d0a8507a2b4536c8b1cc9ebaf959cff4575706ecb386b765b894ab4e237f25
-
SSDEEP
192:jV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2iwsRWF8qa1Dojjgi:NqaCF31cix+Dc4zj6FF46gi
Malware Config
Extracted
cobaltstrike
http://139.196.73.80:9982/ZpJI
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.