Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 05:21
General
-
Target
f7212027c82868db914b4c7cb2f9a20bfad838cbf5be5fea1fda165bc9c11741.exe
-
Size
19KB
-
MD5
3edddafeb65ec164cc3d4161d9842370
-
SHA1
c6c4c2034d210450815bb58674b9eb845f884f2c
-
SHA256
f7212027c82868db914b4c7cb2f9a20bfad838cbf5be5fea1fda165bc9c11741
-
SHA512
da0e94ad7dd74e2ccba587da8248e2c97cfa6dd2f4d11a43bcb7b7fa95e8497428fe23a72ff97a3a70ec395efadd2d8365eaf1309ef5bda46ab4951f737c524c
-
SSDEEP
192:CV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2GWCYpKWF8qa1Dojjgi:MqaCF31cix+Dc4zjzW35FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.37.128:8880/wZBJ
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f7212027c82868db914b4c7cb2f9a20bfad838cbf5be5fea1fda165bc9c11741.exe"C:\Users\Admin\AppData\Local\Temp\f7212027c82868db914b4c7cb2f9a20bfad838cbf5be5fea1fda165bc9c11741.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB