Analysis
-
max time kernel
141s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
14-10-2024 09:01
General
-
Target
590b8d3773dcd610db4783dec9ed3ab3c7cf1e0bcad393f6ac27c5ad3453b483.exe
-
Size
19KB
-
MD5
448cc0beb32e4891cebe42a0e9de9d54
-
SHA1
6e3a9b7e824bf44ab90d702ac26b4b8ad0f3c0a7
-
SHA256
590b8d3773dcd610db4783dec9ed3ab3c7cf1e0bcad393f6ac27c5ad3453b483
-
SHA512
440f582e14212d596e8c160c84c0f7ddea34b32c1ae60ff40eb801a937bc8cd4070597ca70186b833d7d0aed3c5e5417d03e39325253166168abe38849590d04
-
SSDEEP
192:ZV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uqwWF8qa1Dojjgi:7qaCF31cix+Dc4zj9gFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.71.134:10086/nSZB
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\590b8d3773dcd610db4783dec9ed3ab3c7cf1e0bcad393f6ac27c5ad3453b483.exe"C:\Users\Admin\AppData\Local\Temp\590b8d3773dcd610db4783dec9ed3ab3c7cf1e0bcad393f6ac27c5ad3453b483.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB