Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 20:39
General
-
Target
6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e.exe
-
Size
110KB
-
MD5
ce5bebd8d14acf4d69b2346451a0d20e
-
SHA1
d17b4128f8315dc4b3fcf13f4418f6f0da75aab3
-
SHA256
6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e
-
SHA512
b687592f3d896124d224e893930863e7327fd4c95609ce857c4adcf35da5edbad12d97356bbe15b30390b4011792b9fdec7a1c9d3bc728d69126d5a7b1e0ff5c
-
SSDEEP
3072:9B1nFpIMGJbzgTUeIcYSlxT413SlbJYjdv:fFFp7GJzlcYSISE
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://172.26.218.210:11111/YAkX
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e.exe"C:\Users\Admin\AppData\Local\Temp\6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB