Analysis
-
max time kernel
97s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 12:04
General
-
Target
2024-09-18_e277e9bd65497a15aa58423b33aa2c5b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
e277e9bd65497a15aa58423b33aa2c5b
-
SHA1
203faf974542276e1f5d18e29cb6cdbd3c3ee7e9
-
SHA256
a47d7d36c86382c691af5a8c7fdc0d0f5d2c8f058d584cfc9c36d4b21820ccf3
-
SHA512
7a57dac47204a27ce3341e5885c7d0f0de3b9b6d1b657bd626311edd38a43daabeb3dafcb95f0a40f079932638b25998b1ccaeae43a25410f7a0bbdbdcf885e0
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpns:r56utgpPFotBER/mQ32lU+
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-18_e277e9bd65497a15aa58423b33aa2c5b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-18_e277e9bd65497a15aa58423b33aa2c5b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery