Analysis

  • max time kernel
    141s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    24-09-2024 21:16

General

  • Target

    924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf.exe

  • Size

    19KB

  • MD5

    f23784f4ee7af36969a54fe21a9b29f5

  • SHA1

    629b290a4246e2a9705e6a3ae9c595c51af426be

  • SHA256

    924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf

  • SHA512

    a51f8322553c1c775302f1c589d16e415d6d6af14e6b3dc46513d0a80604bea2186a39f4d89cf6809888f42d22e582132e39773f06a655c6ed3af19534e765d4

  • SSDEEP

    192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tMoxIkojWF8qa1Dojjgi:rqaCF31cix+Dc4zjUFF46gi

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.155:80/lV7d

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf.exe
    "C:\Users\Admin\AppData\Local\Temp\924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf.exe"
    1⤵
      PID:2104

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2104-0-0x0000000000020000-0x0000000000021000-memory.dmp

      Filesize

      4KB

    • memory/2104-1-0x0000000000400000-0x000000000040C000-memory.dmp

      Filesize

      48KB