Analysis
-
max time kernel
140s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14-09-2024 14:30
General
-
Target
11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6.exe
-
Size
19KB
-
MD5
a3c518ee64a58d5e1f739124773ced42
-
SHA1
0d96d2e08250ce165252c9a44b79ef4f83a2f1ca
-
SHA256
11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6
-
SHA512
571eeca805b46900359e535f45eb6873bdb9a30a86ebfeaebb134fc4ac43186f713fa09d4b6f0256efe40fe3bb4031d8edea68511c7a29b913f18c8087184a53
-
SSDEEP
192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/24Zq7WF8qa1Dojjgi:OqaCF31cix+Dc4zjzlFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://112.44.197.77:30440/DTRs
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6.exe"C:\Users\Admin\AppData\Local\Temp\11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB