Overview

overview

10

Static

static

3

07bc60e81b...5a.exe

windows7-x64

10

07bc60e81b...5a.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2024 22:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    07bc60e81b63b44ab641432e465692b7263bfefd451f8c79ff8338b68b17ed5a.exe

  • Size

    1.3MB

  • MD5

    d09fd3c20ad09f9de94820b76daebf5d

  • SHA1

    8df2d87f60de3d374051e52a4e69dce6997ab87c

  • SHA256

    07bc60e81b63b44ab641432e465692b7263bfefd451f8c79ff8338b68b17ed5a

  • SHA512

    dfae3602ed86fd93d12176e74c201422b4b3538c91166d8fb5afa0f51f6cc4430f23061c25b3a4df2aef013b5a697b46a8dfa6a55de934a4c24bee97cfbaa8c7

  • SSDEEP

    24576:cLEtDyhFE7IKgVhuBM7bwSjYu4dislTNk:aEt2ClgnuBMdUHi6k

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://118.31.72.185:8810/8Xkb

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\07bc60e81b63b44ab641432e465692b7263bfefd451f8c79ff8338b68b17ed5a.exe
    "C:\Users\Admin\AppData\Local\Temp\07bc60e81b63b44ab641432e465692b7263bfefd451f8c79ff8338b68b17ed5a.exe"
    1⤵
      PID:1772

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1772-0-0x0000014EA33D0000-0x0000014EA33D1000-memory.dmp

      Filesize

      4KB

      Download