Overview

overview

10

Static

static

3

artifact_x64.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    70s
  • max time network
    69s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-09-2024 20:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    artifact_x64.exe

  • Size

    19KB

  • MD5

    a9eeaa41e203c2591c41168b692dab61

  • SHA1

    9a10c5b7e752d1f02e7090e832d541a26300a2e6

  • SHA256

    8c2d1e1ef5565bff721a12ab46a1a8b0be2414092eeecdf53f5e2663a4810114

  • SHA512

    07f2e669632e3d7375717d46b2e6ebe64360a844267e1ecc184b1ff5d9fa4c25110aeb695728e0e6c9187553cd7cebf1019553b3e6aa363ad49c81d07a92ad72

  • SSDEEP

    192:IV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27xr1MWF8qa1Dojjgi:6qaCF31cix+Dc4zjihpFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://believe-servers.gl.at.ply.gg:43296/knL8

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\artifact_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\artifact_x64.exe"
    1⤵
      PID:840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/840-0-0x0000000000020000-0x0000000000021000-memory.dmp

      Filesize

      4KB

      Download

    • memory/840-1-0x0000000000400000-0x000000000040C000-memory.dmp

      Filesize

      48KB

      Download