Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-11-2024 10:43
General
-
Target
2024-11-25_05b0eafe1a97fc23f0008b96f1847322_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
05b0eafe1a97fc23f0008b96f1847322
-
SHA1
799f14bc7839e70e5d2d0756c7d1df559ffa4a5c
-
SHA256
b106f84439b8b2e897a1dc82a9061b53d82b6d006da579b23d45a0062837de39
-
SHA512
53471f455d4e8f9b0ae1358f1b398d3bcbc225e4326bfbcb6d52384ef65ed8258d1c2ff2fef7a92c2027fe9cf32ea9925fb45ce2da2685640b0a34dee610d795
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnl:r56utgpPFotBER/mQ32lU/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-25_05b0eafe1a97fc23f0008b96f1847322_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-25_05b0eafe1a97fc23f0008b96f1847322_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery