Analysis
-
max time kernel
135s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 04:01
General
-
Target
7d115a5215df5ee50707239a6d55bc98751befa4d2cf6dc141b1fd03caf74a4a.exe
-
Size
66KB
-
MD5
49af640a40d32c7469659ed2fa8b0879
-
SHA1
68679b07a60e2e0a192f0cc2f7fbf6e67df357d1
-
SHA256
7d115a5215df5ee50707239a6d55bc98751befa4d2cf6dc141b1fd03caf74a4a
-
SHA512
24600bb3c2f213fa52247193ff2448a78364b07005f23f4f78fc6485e0903b80d73a765f6720ec8da5fb22ad88029d50f2922f1a7c58f0e4b3a725698fcf5731
-
SSDEEP
768:J4nenDFLvlNUTogPdHbePqhFuJEo1802UvPkM4GI28DmO98BvCG+b9J2wEgcJ:ankDFb0cgP1ePqSJ7m0+M7V8Ssga2
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://50.118.225.251:2333/1Omp
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d115a5215df5ee50707239a6d55bc98751befa4d2cf6dc141b1fd03caf74a4a.exe"C:\Users\Admin\AppData\Local\Temp\7d115a5215df5ee50707239a6d55bc98751befa4d2cf6dc141b1fd03caf74a4a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
164KB