Overview

overview

10

Static

static

1

2024-09-18...ex.exe

windows7-x64

10

2024-09-18...ex.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-09-2024 16:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-09-18_279f5beee9d4bf8c54026e78acba61b1_cobalt-strike_megacortex.exe

  • Size

    248KB

  • MD5

    279f5beee9d4bf8c54026e78acba61b1

  • SHA1

    e473e5b82ce65cb58fde4956ae529453eb0ec24f

  • SHA256

    8e1bbe4cedeb7c334fe780ab3fb589fe30ed976153618ac3402a5edff1b17d64

  • SHA512

    544b1c05e7a7f72871c37794d439d5486ea3b9f252687f13b07bae232aa532a34f5104c80ee8382ec251aae884616b034514237629fafcff35340b23b888442c

  • SSDEEP

    6144:pIqxB9hYLylH4GcbfjBaAsaH4+kwLmNC9fAn+CV:iqxgyp4lD0As+FiC94nL

Score
10/10
clopransomware

Malware Config

Signatures

  • clop

    Ransomware discovered in early 2019 which has been actively developed since release.

    ransomwareclop

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-09-18_279f5beee9d4bf8c54026e78acba61b1_cobalt-strike_megacortex.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-09-18_279f5beee9d4bf8c54026e78acba61b1_cobalt-strike_megacortex.exe"
    1⤵
      PID:1928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1928-1-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

      Download

    • memory/1928-0-0x0000000000240000-0x0000000000241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1928-3-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

      Download

    • memory/1928-2-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

      Download