Overview

overview

10

Static

static

10

62db5936e7...46.exe

windows7-x64

10

62db5936e7...46.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    136s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 09:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46.exe

  • Size

    11KB

  • MD5

    bacb43877ca91f659bc04360d9f5634c

  • SHA1

    a0c73b440609dc49f0df6be9bc585895318bb447

  • SHA256

    62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46

  • SHA512

    88e21b30579e128882e1e404980df8804acf72fe6c6b293cfcd11e60a45c1ae0b07eb8e960f57f4e503150a86d30245a810e73a9ecf9e67e9c1ab090e3062777

  • SSDEEP

    192:QmgQHu4ElCO+YQ6ttYpPm54Z3Q5tfBD1txZ:QpQHu4iQ1z3ixZ

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-9cjgv9d1-1327547884.bj.tencentapigw.com.cn:443/bootstrap-2.min.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0) Host: service-9cjgv9d1-1327547884.bj.tencentapigw.com.cn

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46.exe
    "C:\Users\Admin\AppData\Local\Temp\62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46.exe"
    1⤵
      PID:1912

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1912-0-0x00000000000F0000-0x00000000000F1000-memory.dmp

      Filesize

      4KB

      Download