Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13/10/2024, 21:44
General
-
Target
4b80acf118535205d047b5d7d95a4d65a7e4a76e6f3bfa8f15b00728af32b7b9.exe
-
Size
19KB
-
MD5
874f3757e29afdde31996af6213015c1
-
SHA1
f2cc87c578d71759ea6672469033b3c74189b900
-
SHA256
4b80acf118535205d047b5d7d95a4d65a7e4a76e6f3bfa8f15b00728af32b7b9
-
SHA512
99c03494c33bf1acb24d41bcdeed775c32ca83493f25abf3016d5f51b80d14f31c7d263dc0eeecd9df254f9da1605e86889929a00751f7207c25d433f58ca6fe
-
SSDEEP
192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2cbqH5EWF8qa1Dojjgi:RqaCF31cix+Dc4zjhGFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.222.171.125:1245/RMeY
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b80acf118535205d047b5d7d95a4d65a7e4a76e6f3bfa8f15b00728af32b7b9.exe"C:\Users\Admin\AppData\Local\Temp\4b80acf118535205d047b5d7d95a4d65a7e4a76e6f3bfa8f15b00728af32b7b9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB