Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 10:40
General
-
Target
258683d7907ddcfe34008b7484a04c3880740c922b337197e27b13916d493a94.exe
-
Size
19KB
-
MD5
9ab470ab07f9a465b391c0cd7299da7d
-
SHA1
9ecb6c8364ecd44fa4bfba79fd462617212a0c48
-
SHA256
258683d7907ddcfe34008b7484a04c3880740c922b337197e27b13916d493a94
-
SHA512
0c4d01506b33074dc0d28bdab9a2de7ec34ff22197b0b2b395170c86fc21bed6dc8a6430aa0467532172142743939f300ad072fc8f52652ef57c8b14f2a0bdde
-
SSDEEP
192:1V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/24azO83wWF8qa1Dojjgi:XqaCF31cix+Dc4zjSOiVFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://121.40.233.192:39888/XCYi
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\258683d7907ddcfe34008b7484a04c3880740c922b337197e27b13916d493a94.exe"C:\Users\Admin\AppData\Local\Temp\258683d7907ddcfe34008b7484a04c3880740c922b337197e27b13916d493a94.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB