Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15-09-2024 16:59
General
-
Target
3122debdc0fc7042f161f1e99f2a8809b00cd2e6beea3616805e09a324c42a7d.exe
-
Size
19KB
-
MD5
f4c84592f1374e929c8dbedea1a15286
-
SHA1
60c80da31fba6cef217cb8cde9f7fd80473dc145
-
SHA256
3122debdc0fc7042f161f1e99f2a8809b00cd2e6beea3616805e09a324c42a7d
-
SHA512
f6493b66e76c1448071779d830566bc8f708ddd9e22392996f08f281ecd9003020f606aecc2f7b4d1c5eea39e977fc25eededafc6f055cf1e85417ab5dbe6b6a
-
SSDEEP
192:UV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/224K80mXWF8qa1Dojjgi:GqaCF31cix+Dc4zjz4ImmFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.110.121:6667/R5kk
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENCA)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3122debdc0fc7042f161f1e99f2a8809b00cd2e6beea3616805e09a324c42a7d.exe"C:\Users\Admin\AppData\Local\Temp\3122debdc0fc7042f161f1e99f2a8809b00cd2e6beea3616805e09a324c42a7d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB