Analysis
-
max time kernel
141s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24-09-2024 18:24
General
-
Target
本单位2024年上半年工作总结和下半年工作安排.docx ... .exe
-
Size
365KB
-
MD5
447eedd0ca8f3f5901f515e87fe3c279
-
SHA1
5abbbfdc3174ba565a8abe1636c4a940bc3d23f1
-
SHA256
3a3e0512b921fb5ccc231e0cbcaef12f3924eee35506f5813f4832e9cde5977d
-
SHA512
e316e3c20af47b2502a6674dd1ee8291fc57ee16fa051092b213525e8577ae7d60d05cc0d7ab6e8d7c8f5f56dde29e859ecf3404afdd2c73be7e4d63507e2fcc
-
SSDEEP
6144:urMliwGQNb5f6XzW+AQOn+LrttHvAUzG5Eq:qgPHf66TQxPPHTG5Eq
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.219.180.167:443/zyzyz
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\本单位2024年上半年工作总结和下半年工作安排.docx ... .exe"C:\Users\Admin\AppData\Local\Temp\本单位2024年上半年工作总结和下半年工作安排.docx ... .exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4.0MB
-
Filesize
332KB
-
Filesize
332KB