Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-09-2024 09:41
General
-
Target
45cdc5cc998d33b38a0b6b82cfd194561cff02a42960373f4823adb1fb4852d6.exe
-
Size
19KB
-
MD5
3a4883239f8f9f365a7de239f69e8c2a
-
SHA1
e777e565c0af8a655ba437f9f28d4a7aa8c9f111
-
SHA256
45cdc5cc998d33b38a0b6b82cfd194561cff02a42960373f4823adb1fb4852d6
-
SHA512
4e135cd941061b87076379003def768a0521f45d922d5806b0201df2391f1167c454f638b99cd649908743ac5fc4ce4e1104a1d3968a8448752bc6bd1692b0c9
-
SSDEEP
192:qV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2l2pgWF8qa1Dojjgi:EqaCF31cix+Dc4zj5bFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://111.229.79.145:7777/Qir1
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\45cdc5cc998d33b38a0b6b82cfd194561cff02a42960373f4823adb1fb4852d6.exe"C:\Users\Admin\AppData\Local\Temp\45cdc5cc998d33b38a0b6b82cfd194561cff02a42960373f4823adb1fb4852d6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB