Analysis
-
max time kernel
148s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
-
submitted
18-09-2024 19:21
General
-
Target
0c8fd78b49b429955b95d5491ee6e0622ba69d3fcf49aabc5762c0f36795a3b8.exe
-
Size
19KB
-
MD5
4b6b4048c597d60f54030b1d4fb3f376
-
SHA1
956a1673c4783fd2da9670e9f2c53446fc5ca05f
-
SHA256
0c8fd78b49b429955b95d5491ee6e0622ba69d3fcf49aabc5762c0f36795a3b8
-
SHA512
f6a7bbea1014de1b79e9d196afeb1d76818856858ae4fcd1814bf5e41dcdca211bf0554e888018c7d51ab61528db7773186fa068a610ca1b5c3d5206b7f4ce5c
-
SSDEEP
192:8V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KcQ0k6WF8qa1Dojjgi:eqaCF31cix+Dc4zjuojFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.180.12:7810/vN3f
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c8fd78b49b429955b95d5491ee6e0622ba69d3fcf49aabc5762c0f36795a3b8.exe"C:\Users\Admin\AppData\Local\Temp\0c8fd78b49b429955b95d5491ee6e0622ba69d3fcf49aabc5762c0f36795a3b8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB