Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24/08/2024, 22:59
General
-
Target
help.exe
-
Size
19KB
-
MD5
d0ad1150a2e7c9699e00e265bf46d236
-
SHA1
dddbf37fe2be08bccb2ebf153a5639a22ac7bf3e
-
SHA256
31eb20b5c7a48b125b80229b085e19088463e388f8a76e948e37b8c40aad1ecd
-
SHA512
02dfe71c20c96916dd06ac4f5ee836526297b75d5ecd780e14c6a5bd0a1bb99cd343cd4e36e784f4e4eb4d28a338da47726b95cd6eb45d5bdabba6b835870716
-
SSDEEP
192:KV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/21RlxEWF8qa1Dojjgi:kqaCF31cix+Dc4zjcxFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://106.15.67.102:80/vWJF
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\help.exe"C:\Users\Admin\AppData\Local\Temp\help.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB