Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 19:28
General
-
Target
ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab.exe
-
Size
110KB
-
MD5
760966bf4bc8ca54dae1d8b1efc49991
-
SHA1
53617e385e6f6b89aef5b2a238e4dc586831defd
-
SHA256
ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab
-
SHA512
fb335d95b9947fc2cbbf87ce4a73022957927fe418acac51c04f7310d699b60f476266f236e05b51c1cb0e1711dff731b1069cd3629b52de093e95d102d44419
-
SSDEEP
3072:piR5xblbXbNjvuMEtgIlgpypBjAbl/Wa:uDblbX1tEtgWPjoW
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://172.26.218.210:11111/YAkX
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab.exe"C:\Users\Admin\AppData\Local\Temp\ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB