Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13-09-2024 09:58
General
-
Target
e0e85f6cf5826b57468bdcc874679e2d0e909624ce66a5e418fb4f0368f6abcb.exe
-
Size
19KB
-
MD5
6b12eb3b927ea6564d9ec0fc96996e8d
-
SHA1
7f717bbb5e5f35b1f2d7deaeff8f693c8c2078f8
-
SHA256
e0e85f6cf5826b57468bdcc874679e2d0e909624ce66a5e418fb4f0368f6abcb
-
SHA512
1bf3f3b6305fd0146ec37e587edb48e370720d3b9c364e4ebd6dcb37fff3b1fc6094d33f5fa3415364fe80f735b4bdea32a23b5314b42f9fbca5d9ba477b485f
-
SSDEEP
192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Gv07rUHMCMWF8qa1Dojjgi:OqaCF31cix+Dc4zjSrUHMCpFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://120.55.241.243:18181/QHwM
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATM)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0e85f6cf5826b57468bdcc874679e2d0e909624ce66a5e418fb4f0368f6abcb.exe"C:\Users\Admin\AppData\Local\Temp\e0e85f6cf5826b57468bdcc874679e2d0e909624ce66a5e418fb4f0368f6abcb.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB