Analysis
-
max time kernel
96s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 04:04
General
-
Target
2024-11-21_5e665037173242378c2a94118e784f28_bkransomware_cobalt-strike.exe
-
Size
690KB
-
MD5
5e665037173242378c2a94118e784f28
-
SHA1
f0d0ebd0c4929b72c689fca5edae5851e2730d97
-
SHA256
cc2355aec8e79ec9738a6c103dd0d927424cde96c70823ce10e62645c706f664
-
SHA512
7d0daedc26e6de82302b7ebd1a5638b8b824eb8aab1ef1c65c09562f0d1eb8a8ef7f2b46b6007ea831468e503bbc7e6ea9aa3e91c38877b0a366b856cd39d3d0
-
SSDEEP
12288:55JW4w5Cl3P/cLPwchkf83l/5hnrdDihRV+4+xGj8:57k5+wPwchkf8RvnrdDaaGj8
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_5e665037173242378c2a94118e784f28_bkransomware_cobalt-strike.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_5e665037173242378c2a94118e784f28_bkransomware_cobalt-strike.exe"1⤵
- System Location Discovery: System Language Discovery