Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26-09-2024 09:52
General
-
Target
33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94.exe
-
Size
19KB
-
MD5
35ad6d4ef6da0003b4b91090c7c08a20
-
SHA1
2144995f3cd06c5e7f314c8c2d0c0815b2669528
-
SHA256
33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94
-
SHA512
79994b40229e2dc5a328282cb7a0a2a2257b0f55af62902226e0a7a3f1cb2df556f5f423f457d5c503e8d3a7474a095e4140158ac4b261660a2810f9cf6f5b57
-
SSDEEP
192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27yjFWF8qa1Dojjgi:OqaCF31cix+Dc4zjwFFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://172.16.10.17:80/VWLd
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94.exe"C:\Users\Admin\AppData\Local\Temp\33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB