Analysis
-
max time kernel
93s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-11-2024 03:10
General
-
Target
2024-11-19_bc7e16994e1d68af4a38c39ad1818098_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
bc7e16994e1d68af4a38c39ad1818098
-
SHA1
2d3b5a686e56de4bf47aa9b0f6e44d24dd5d8d2b
-
SHA256
d730d93edd277699baa3ea9989042ae9a8d1f27637aaa902f6adbd25d76ba9a8
-
SHA512
57df8280dd2c6aaeddd6024a0fe3f9156405a25f53584d692985c4116c8560d4e188cccbef47abaf96641c10db2438e418e33a57f551fcae72995aa3989f9c64
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnJ:r56utgpPFotBER/mQ32lUr
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-19_bc7e16994e1d68af4a38c39ad1818098_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-19_bc7e16994e1d68af4a38c39ad1818098_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery