Analysis
- max time kernel
138s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
27/07/2024, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
- Target 7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6.exe
- Size 1.4MB
- Sample240727-sthd4syemd
- SHA256 7e4dc905e34f493124d44e43c1501f19c56ae516b5df55b523d9fa960048d5c6
- MD5 50df6443b7e2c1ea39e22d9350550ea6
- SHA1 856398696b98679d8241c73ddda1af2b1c13d1b3
- SHA512 a4608bdec06a4fb0740cd4c9b8de54c44a84483ef9d1ac05c5f2d43a5dd298526bbc0b460ac629153571b9208bce55a22745e7866281199c117dc3673d95ae0f
- SSDEEP 24576:OPgl6+VwCEXkR6I7mNnudYLg4Q+R6gnRC1x8F/VDRlp:96MwyoudYLHNR+1MBp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.0.126:8888/DvJY
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Signatures
- Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.