Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 20:23
General
-
Target
2024-11-20_33316952069cb3a25374f4e2bbec705b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
33316952069cb3a25374f4e2bbec705b
-
SHA1
47860683bb5c725f86e9acf84806cab0818d5f42
-
SHA256
8d1f5fb956868f357c7f7e618f3fcdaa460f3079ad2b2ec12eb1fb49959e3f17
-
SHA512
cf88fffb438e6098955637f46a956278d96dfff9bfd003c987ae072b18f2c324b63a11feda3cc9c3319cef953da3f34d8f6f65b5c489f167ca8298c6c40bc6df
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnm:r56utgpPFotBER/mQ32lUc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-20_33316952069cb3a25374f4e2bbec705b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-20_33316952069cb3a25374f4e2bbec705b_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery