Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23-07-2024 15:01
Static task
static1
Behavioral task
behavioral1
Sample
d3a0a5985fc3beb4c9079a2df98f117ff54ddb456728260696c0f9d348ec7620.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
d3a0a5985fc3beb4c9079a2df98f117ff54ddb456728260696c0f9d348ec7620.exe
Resource
win10v2004-20240709-en
General
-
Target
d3a0a5985fc3beb4c9079a2df98f117ff54ddb456728260696c0f9d348ec7620.exe
-
Size
19KB
-
MD5
17d7b986bfa1bd8af09ec9d6f6e5647a
-
SHA1
c6558e5ffbd503ebcae5e97f69aed71632ff8a81
-
SHA256
d3a0a5985fc3beb4c9079a2df98f117ff54ddb456728260696c0f9d348ec7620
-
SHA512
83b90a996bde7f58f582116c74f1571f5eda687ea18542e5adab5e47f34e3bcdeaec5b372dc29da749277b1bf51e08edc5bd07e890edbd109b16e0e7f0720d82
-
SSDEEP
192:CV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2AjMDzeWF8qa1Dojjgi:MqaCF31cix+Dc4zjBMDzFF46gi
Malware Config
Extracted
cobaltstrike
http://8.137.55.59:8014/wv97
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENAU)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.