Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-11-2024 14:17
General
-
Target
8b90f3fa17d61e33e4ff924ebed4670dfc6f7ad08b13c3bfcc2f95499f407100.exe
-
Size
9KB
-
MD5
dd7ddfb833ebe22f0e4236f2a8e3b92c
-
SHA1
a2f6b0adcae42b0ff0b2b7554d12e43e22836f2f
-
SHA256
8b90f3fa17d61e33e4ff924ebed4670dfc6f7ad08b13c3bfcc2f95499f407100
-
SHA512
77cbdfe2a22be8e59ef6e818f4cabbad3320b75a1bf8a117f526961dbfc9f91d6c974db6d470ae0ab84bbab66a95b5d119c665bb5a6d5f9bfbdf1eb6a85e99b9
-
SSDEEP
192:ARqd3PcxUjboo4DQDtU0qo+h0hobjsQWTLBV6Z9wqWky:PbjboowQi0q0hobjVWXBkZzy
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.253.207:443/4sHn
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b90f3fa17d61e33e4ff924ebed4670dfc6f7ad08b13c3bfcc2f95499f407100.exe"C:\Users\Admin\AppData\Local\Temp\8b90f3fa17d61e33e4ff924ebed4670dfc6f7ad08b13c3bfcc2f95499f407100.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
4KB