Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 00:36
Behavioral task
behavioral1
Sample
2024-07-11_c221eee47fdbd267275b1ba0242e37d5_cobalt-strike_cobaltstrike_poet-rat.exe
Resource
win7-20240708-en
9 signatures
150 seconds
General
-
Target
2024-07-11_c221eee47fdbd267275b1ba0242e37d5_cobalt-strike_cobaltstrike_poet-rat.exe
-
Size
6.0MB
-
MD5
c221eee47fdbd267275b1ba0242e37d5
-
SHA1
a1111c0f58ef98ef48b92720cb20ddde40cee770
-
SHA256
30ea1b9a3920e0f62665232045a963891959195784cd24ee12864a0a4efdd409
-
SHA512
2ceab87da9febc0ee7280c98405c0696416de3169595bbd28cb6d9ccd426b9522f81c8d8df2749e2c506a6c090e566a6d7e82755610ea0c95156cc9950fceff3
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUS:eOl56utgpPF8u/7S
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule behavioral2/memory/4940-0-0x00007FF61C970000-0x00007FF61CCC4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/4940-0-0x00007FF61C970000-0x00007FF61CCC4000-memory.dmp upx