Analysis
-
max time kernel
90s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 14:13
General
-
Target
12ce354fb01d16524126287cc0b12f14aa3077c6273dc3f479de26b104626658.exe
-
Size
19KB
-
MD5
85b5bf3202121bcc048ae8b5b04595bd
-
SHA1
b61d0fc5797fbd6734681ae552275f5afddca813
-
SHA256
12ce354fb01d16524126287cc0b12f14aa3077c6273dc3f479de26b104626658
-
SHA512
abbf6976cdae01c3d08ac8c89ada516fec2d339ab7d7dc2792ab4978eaadc52522885faa3ec1a05104b558263077702149b22da8cf968184bc7374ea25136956
-
SSDEEP
192:zV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2/WuvkWF8qa1Dojjgi:dqaCF31cix+Dc4zjaWuvRFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://89.197.154.115:7700/E5nu
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; ASU2JS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\12ce354fb01d16524126287cc0b12f14aa3077c6273dc3f479de26b104626658.exe"C:\Users\Admin\AppData\Local\Temp\12ce354fb01d16524126287cc0b12f14aa3077c6273dc3f479de26b104626658.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB