General
-
Target
2024-10-18_8025e69a6f4542b510040e9188847b90_cobalt-strike_hijackloader_megazord_poet-rat
-
Size
46.2MB
-
Sample
241018-bs2b6a1djl
-
MD5
8025e69a6f4542b510040e9188847b90
-
SHA1
93d6ed797587b824e15299cf96a0cced6d4cba3d
-
SHA256
4af8a3231cf8ef4c201ec112d2834bbed7d9155bf4035597e84be60a0d4576cc
-
SHA512
5943bc255bd7f8b69644a5ce730d87f64c6e1011fe5f6d9596cbc71f9b9de4755501ff7bc398f03cbd272b7caa4d51ccc97b683c261de29ab2154e619c701369
-
SSDEEP
196608:HCJfrFyrm3hgLYAVuSnGnhOg0B3s4VuaXemGMtS6pzNWYA5+47WVXebdx7VbVTiB:i9rYq3hg8ThNSfM75+464ZpTbyMyzU6
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-18_8025e69a6f4542b510040e9188847b90_cobalt-strike_hijackloader_megazord_poet-rat.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-18_8025e69a6f4542b510040e9188847b90_cobalt-strike_hijackloader_megazord_poet-rat.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-18_8025e69a6f4542b510040e9188847b90_cobalt-strike_hijackloader_megazord_poet-rat
-
Size
46.2MB
-
MD5
8025e69a6f4542b510040e9188847b90
-
SHA1
93d6ed797587b824e15299cf96a0cced6d4cba3d
-
SHA256
4af8a3231cf8ef4c201ec112d2834bbed7d9155bf4035597e84be60a0d4576cc
-
SHA512
5943bc255bd7f8b69644a5ce730d87f64c6e1011fe5f6d9596cbc71f9b9de4755501ff7bc398f03cbd272b7caa4d51ccc97b683c261de29ab2154e619c701369
-
SSDEEP
196608:HCJfrFyrm3hgLYAVuSnGnhOg0B3s4VuaXemGMtS6pzNWYA5+47WVXebdx7VbVTiB:i9rYq3hg8ThNSfM75+464ZpTbyMyzU6
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-