Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 09:34
General
-
Target
c833a56d405703eecc10319f819797140e4005e64c642e409ca0abb455003b0a.exe
-
Size
19KB
-
MD5
3392b2016dddcdeebb3783e6a0f4c265
-
SHA1
f2806e8c0ffad6794cbb58ec816f52601c385af5
-
SHA256
c833a56d405703eecc10319f819797140e4005e64c642e409ca0abb455003b0a
-
SHA512
61d42dc707744d59eecaf9c588730a616e0044af15dd7d73215135a385163619b4f14db18f29f9a8ae4823749d9106079ef65934f92b2de7124f2e52f9c1bde3
-
SSDEEP
192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2rx3zWF8qa1Dojjgi:PqaCF31cix+Dc4zjux6FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.3.153:1111/6Yma
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c833a56d405703eecc10319f819797140e4005e64c642e409ca0abb455003b0a.exe"C:\Users\Admin\AppData\Local\Temp\c833a56d405703eecc10319f819797140e4005e64c642e409ca0abb455003b0a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB