Analysis
-
max time kernel
140s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13-09-2024 18:50
General
-
Target
66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c.exe
-
Size
19KB
-
MD5
e5f1bb2d3bcaf31398b5d7f65092e6f8
-
SHA1
ea7d89eb3279b5fc1c5a3dda3568f0f1af9a5d1e
-
SHA256
66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c
-
SHA512
5ef48cf754b0536ce0d3cfe7caf32ff68035066262682b5d584d7f0b62eb85bea596ab1f1560992e5bf5798ad57647cc70b3a43c6863e98168d0799bbab4b804
-
SSDEEP
192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2F4A+8GWF8qa1Dojjgi:KqaCF31cix+Dc4zjC5+gFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://39.108.11.221:8899/BdrE
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C; .NET4.0E)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c.exe"C:\Users\Admin\AppData\Local\Temp\66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB