Overview

overview

10

Static

static

3

artifact_x64.exe

windows7-x64

10

artifact_x64.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-09-2024 15:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    artifact_x64.exe

  • Size

    19KB

  • MD5

    7b7c97cb9bd44e8ba6f60ad25930756b

  • SHA1

    125ae20681895bb61d2bbb02a45d312b4fb311e4

  • SHA256

    062a65ba01431781bbbc3e6291a57e5cb37c16ca0cdb14b0fb60754aff4904b2

  • SHA512

    54dcbde8e98af04b588177803bcec6630c17e5f01d157d8af517fc55742797c55f4aac54fcdb7643e6247d74b37f3145c4c137cba92a01e629a3d753861035c8

  • SSDEEP

    192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2wXnWF8qa1Dojjgi:wqaCF31cix+Dc4zj7XWFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://85.209.153.114:7894/M3ti

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\artifact_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\artifact_x64.exe"
    1⤵
      PID:4908

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4908-0-0x0000000000020000-0x0000000000021000-memory.dmp

      Filesize

      4KB

      Download

    • memory/4908-1-0x0000000000400000-0x000000000040C000-memory.dmp

      Filesize

      48KB

      Download