Analysis
-
max time kernel
139s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10/08/2024, 11:54
General
-
Target
2024-08-10_676bc8673647023a9e5bb6b81ed0f64b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
676bc8673647023a9e5bb6b81ed0f64b
-
SHA1
88ac93ed073ad59d6a3830daa33e2596e7e2b37b
-
SHA256
48378ff66bb1de41b4134b4b8ea2069ee70c5aebb8515169044c65231616fd52
-
SHA512
552bd9ba2b301c08cd3770f01b70eedb9192e5212b8a61bdba580076435cb475003b76d8c02cee272ea7e9cb79a0f0dcc95bcf11b4a1997a703de61a7eeecb01
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnm:r56utgpPFotBER/mQ32lU8
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-10_676bc8673647023a9e5bb6b81ed0f64b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-10_676bc8673647023a9e5bb6b81ed0f64b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery