Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16/11/2024, 01:13
General
-
Target
2024-11-16_f72aa0dbd42c2cc1fc1f252934426dfa_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
f72aa0dbd42c2cc1fc1f252934426dfa
-
SHA1
f1df9705d1ef72ca84104fc82d929ba60ef9219d
-
SHA256
4346d8c1b5c59c51866771fa296cf54c89ea2ad9926f3197dcf91e95369a6ea6
-
SHA512
558d74f863a28f50c823c5f641e9d6107cc7d9362173426c5c89e46f6531b64ea998bd43079ea36276307d8a3334effcbb577fe469392906809d37e44e890689
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnK:r56utgpPFotBER/mQ32lUU
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-16_f72aa0dbd42c2cc1fc1f252934426dfa_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-16_f72aa0dbd42c2cc1fc1f252934426dfa_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery