Analysis
-
max time kernel
93s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 13:40
General
-
Target
2024-11-20_d88c413defda010c64fa481a164bf02b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
d88c413defda010c64fa481a164bf02b
-
SHA1
c6b04d07075d905f4d190bba5515e34e1d9a7948
-
SHA256
2879a8bedb9dd9c898dd1ef8303641f8219ddcf154fdaf21e6c0aa8eac0d76b0
-
SHA512
f601b533173ed92b64bddb0cd303de61ad43c9115bd955a792f8827e0ccb8072f5f1e86515bb676c187354f3b9da9780271606a66e06d918325fe167bcdca75a
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpni:r56utgpPFotBER/mQ32lUI
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-20_d88c413defda010c64fa481a164bf02b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-20_d88c413defda010c64fa481a164bf02b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery