Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
20/11/2024, 14:26
General
-
Target
2024-11-20_ceefbc73808897bf4eca84f41cb4ace7_cobalt-strike_luca-stealer_magniber_sliver.exe
-
Size
9.1MB
-
MD5
ceefbc73808897bf4eca84f41cb4ace7
-
SHA1
a7db2acaded8246c0c055edf4dac32a004b4cf3b
-
SHA256
f6236a45207057e0326f9da4c09e6990721ee2460f191a64963cdab94c899828
-
SHA512
5756f7db2072b4b8acb29c4366f01205ccf4f03a584d1edd05d651711bb09f20182da5d0c7a72f758f562b071ccf06271d7766f9e85e9a28d0a6326bc1b40efb
-
SSDEEP
98304:lQDws8wjVIKohJKt/VNdN1YeT007kxa+PZCN3RIYYAcMFCs:OL80IKIJKttNDK9076LZCN3R9xFh
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-20_ceefbc73808897bf4eca84f41cb4ace7_cobalt-strike_luca-stealer_magniber_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-20_ceefbc73808897bf4eca84f41cb4ace7_cobalt-strike_luca-stealer_magniber_sliver.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
9.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
9.2MB