Analysis
-
max time kernel
141s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-10-2024 01:29
General
-
Target
a390b03e67b809b3dd08b840e3e917eb701387309c5a8859438dc926ce62ec64.exe
-
Size
19KB
-
MD5
71f8b8789a4b0ac3f057f1468579fc23
-
SHA1
2f424692dcfb5f9fe87f1e94fd2922ab3fb2143d
-
SHA256
a390b03e67b809b3dd08b840e3e917eb701387309c5a8859438dc926ce62ec64
-
SHA512
b84f80a40a2b8a7fdb897548028df92119f7fcdfd5ed4f1f4046420886dbfb5443fa4b04ac8dd9fcb05a3daaeb0fa5f12a157240d5597ae2faaf6d2bc020e0a2
-
SSDEEP
192:XV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2oH3pWF8qa1Dojjgi:BqaCF31cix+Dc4zjz30FF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.130.42.227:10001/2yMe
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a390b03e67b809b3dd08b840e3e917eb701387309c5a8859438dc926ce62ec64.exe"C:\Users\Admin\AppData\Local\Temp\a390b03e67b809b3dd08b840e3e917eb701387309c5a8859438dc926ce62ec64.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB