Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28-09-2024 18:09
General
-
Target
af37b9eef2bc23df657505282751bdcc0631573d2f2de3a4ac63c7dff9083509.exe
-
Size
1.7MB
-
MD5
a60f5230165d48e31b90ec1242c52189
-
SHA1
e573e9befe1d0c5c2c83b59e5c300fbebdf688e6
-
SHA256
af37b9eef2bc23df657505282751bdcc0631573d2f2de3a4ac63c7dff9083509
-
SHA512
73360d922c273ef3ca379f15cb94c14c490b5acf15246ddc68b8a3f973ac003771df7635db4aa55aac8aa86b0d2103d6c9d3fc5a94f270c10447347305129058
-
SSDEEP
24576:9uBCE5YcOmEeFNvd9GKUjj0KvzxRogOIQnd5:0YlcOy319yjjHX2n
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://47.109.26.55:8005/2yz8
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\af37b9eef2bc23df657505282751bdcc0631573d2f2de3a4ac63c7dff9083509.exe"C:\Users\Admin\AppData\Local\Temp\af37b9eef2bc23df657505282751bdcc0631573d2f2de3a4ac63c7dff9083509.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB