Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
27/11/2024, 09:36
General
-
Target
test29.exe
-
Size
354KB
-
MD5
fccc38fc0f68b8d2757ee199db3b5d21
-
SHA1
bc38fe00ad9dd15cecca295e4046a6a3b085d94d
-
SHA256
b9a30bd6a26cade7cd01184c4f28dd3c18da218a3df2df97d3b294b42e34ef14
-
SHA512
219334ec29a50a27f3caf5a9bad1be4b6207890198da34ec55986195f477751a3063b2a782afeeef41474870696440d038e5fd0cb54df17467ffb15ba7ba83a9
-
SSDEEP
6144:qBMVoQbWOpA2bAUzMOnbjSF262JmwSp/BiVIpFueJ92EHEQ/k5nVa+:q+e+A2bAUoOnbGF2XmfpiV8xJ9RHEQ/c
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://�'�)���@��@'��u �.Qt�,��R�y��b� ��6��'\�<C+xS��ǎ}���0IޭQ �}�W��x��R8�&w� }�+yq����R.�kem:2470497230)���@��@'��u �.Qt�,��R�y��b� ��6��'\�<C+xS��ǎ}���0IޭQ �}�W��x��R8�&w� }�+yq����R.�kem
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family
Processes
-
C:\Users\Admin\AppData\Local\Temp\test29.exe"C:\Users\Admin\AppData\Local\Temp\test29.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
336KB
-
Filesize
516KB
-
Filesize
12KB
-
Filesize
516KB
-
Filesize
384KB