Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-12-2024 15:45
General
-
Target
2024-12-16_f92b8e3d866187739cec9e39310217dc_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
f92b8e3d866187739cec9e39310217dc
-
SHA1
46f875a71165be3756e1355b243df739afbebf96
-
SHA256
46acfab8391c53457ca554c1d3297c8708dd23454be1a54643983301b1cb8210
-
SHA512
296a7862450c6e81d3ea096ef84ddb05f7b5b011d47d26d31b9f5cb37cdf8a93e6465af304c20fb9e8c0b99d13c32d5d2220d85d03d02ef9c5317d9d05ca7084
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnz:r56utgpPFotBER/mQ32lUV
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-16_f92b8e3d866187739cec9e39310217dc_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-16_f92b8e3d866187739cec9e39310217dc_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery