Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/07/2024, 15:24

General

  • Target
    7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe
  • Size 1.4MB
  • Sample240727-sthd4syemd
  • SHA256 7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • cobaltstrike

C2
  • http://192.168.0.126:8888/DvJY

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe
    "C:\Users\Admin\AppData\Local\Temp\7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe"
    1⤵
      PID:3616

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3616-0-0x000001B5E9270000-0x000001B5E9271000-memory.dmp