Overview

overview

10

Static

static

3

c6eac96ad4...0N.exe

windows7-x64

10

c6eac96ad4...0N.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    111s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2024 11:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0N.exe

  • Size

    17KB

  • MD5

    3ce3abd823a020f7bc05313372880410

  • SHA1

    9addf27fd5ba00443714cab7073b93f475913fee

  • SHA256

    c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0

  • SHA512

    fd8ede211cb207e0418fcde10bfb99f39ba2ff7c9d4b7c230d7394d6bf1ba4e2de47f4b25d1a1e682228d87acecfba83908d5eb2354e6262d325c86cd4941d70

  • SSDEEP

    192:CDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4TKxTt+6kxiY:CDMAoKz6WtKEj7aBDig0IAY

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.75.134:1000/CUSr

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0N.exe
    "C:\Users\Admin\AppData\Local\Temp\c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0N.exe"
    1⤵
      PID:3552

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3552-0-0x0000000000020000-0x0000000000021000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3552-1-0x0000000000400000-0x000000000040C000-memory.dmp

      Filesize

      48KB

      Download