Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13-09-2024 10:04
General
-
Target
9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258.exe
-
Size
93KB
-
MD5
165c0fc71fb0f7fcec62811116f5b634
-
SHA1
3e44a0b4f151a881d51bf0660a015e306c33e789
-
SHA256
9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
-
SHA512
831f6e15b15b76bb477a3e08741ff9c173e8ad5c486234c1d8e853928619e674a7d0868bc8377e554037ac8164c0d30680b7e93b22b0149b5bef56d2bfc8cff3
-
SSDEEP
1536:tY4HAybOLsZSx/ZtsBQXHwUVxdnX+5EqTIm4gKN2P8Jd84h9lKASE:H0XtVxJuLTKNBd8aHuE
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.3.27:88/SZAo
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; ASU2JS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258.exe"C:\Users\Admin\AppData\Local\Temp\9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB