Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
31-10-2024 08:23
Static task
static1
Behavioral task
behavioral1
Sample
b64b522a9b754bca2d34348c9d9672b6f72f0d42331dd04fd58af5b57ab70c24.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b64b522a9b754bca2d34348c9d9672b6f72f0d42331dd04fd58af5b57ab70c24.exe
Resource
win10v2004-20241007-en
General
-
Target
b64b522a9b754bca2d34348c9d9672b6f72f0d42331dd04fd58af5b57ab70c24.exe
-
Size
19KB
-
MD5
208b8cd5653007e6c60d90318f87417b
-
SHA1
e495c9a44973dfb46721cd14a6adb1b50a16f983
-
SHA256
b64b522a9b754bca2d34348c9d9672b6f72f0d42331dd04fd58af5b57ab70c24
-
SHA512
6cd1a12d8921c86a51b3d7427ccbaaca35913b7d08048496bca6b1ee86f5c2f072d55d557ee36b42ea224447f798aa227491e45d143357706157bac52d463f23
-
SSDEEP
192:PV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2wnvWF8qa1Dojjgi:JqaCF31cix+Dc4zj7OFF46gi
Malware Config
Extracted
cobaltstrike
http://192.168.136.130:1234/4rpG
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;PTBR)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family