Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15/11/2024, 02:24
General
-
Target
2024-11-15_dee1f1eebd4cda7055aba8a8657d7438_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
dee1f1eebd4cda7055aba8a8657d7438
-
SHA1
df8f192fde99e4149991f6b4a7a216c424515b84
-
SHA256
96fa9d50a3811b63197a80784fd31172c9599c4ae3d5b2f9963e177203da2256
-
SHA512
f4b63f6d93a0fe4c94c937199826f3f922f11a7c560c75e9c001fe00d609d8e42f82b74043f7677bc9a218f655b073b1856b390b3af61b79cbbead393fef300f
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnN:r56utgpPFotBER/mQ32lU3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-15_dee1f1eebd4cda7055aba8a8657d7438_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-15_dee1f1eebd4cda7055aba8a8657d7438_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery