Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10/09/2024, 12:23
General
-
Target
2024-09-10_675c372eeaffa50b9c5b2dd4beb9849a_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
675c372eeaffa50b9c5b2dd4beb9849a
-
SHA1
b17dcc42f722191e590d208e5dc28b4014d3cbc3
-
SHA256
6577246375ce26c5323a291a4cea1510b6847da04e4fe4cfe45f40c6082dbe66
-
SHA512
fe9e50d8ad8f4f32a735dab5c4ef0bddef2d3d4e9b2c0f2ca6e50af927ad410b5dcde0b6040e6334dbe4dcf6a514a29d545a8c62e65f69c81008ffe2153bb14c
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnX:r56utgpPFotBER/mQ32lU1
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-10_675c372eeaffa50b9c5b2dd4beb9849a_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-10_675c372eeaffa50b9c5b2dd4beb9849a_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery