Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-09-2024 12:33
General
-
Target
2024-09-05_a0abc048db4b7fe529df6f2f2a661b1d_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
a0abc048db4b7fe529df6f2f2a661b1d
-
SHA1
feb10eb67ecf6cc737f8cad16317dea5db18b820
-
SHA256
c50408706873d3835ba38ff94e36376c46075b0f87762756aefe800c856fdf22
-
SHA512
bb341c9dd8d244509f1d1774a8f77f187760e7b60df92d2cb1d1ea7b673cacba351ca0fcd7a0ba6aaaff2bce1a43b317a96f00a80e4356496f8382524eefd0cf
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnM:r56utgpPFotBER/mQ32lUK
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-05_a0abc048db4b7fe529df6f2f2a661b1d_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-05_a0abc048db4b7fe529df6f2f2a661b1d_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery