Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 10:52
General
-
Target
TS-696C.exe
-
Size
337KB
-
MD5
9b164c97f44eca962f069fa371944a05
-
SHA1
c0a66eec7cb5442894728c52bcfa97f1cd4e6e95
-
SHA256
3f104bb1d61e7a87f56cffb4282d6f34c761a2f8efd28b75108e28759e27dd16
-
SHA512
9f7a4932a185b304ef9384643825231932b93fa08d874e103ba50425ece19beb4e6fd3dd09c54dbcec4a7e9372eeda7193a54e20d5b41952f709db3741b19e01
-
SSDEEP
6144:JnQSf+0fSyWagx+BHxtBzZ2l/Ku5rVHrYYPoPTAbrAx:VQyTVIx8Nk5rVHxoPvx
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://217.12.218.46:80/zJWB
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family
Processes
-
C:\Users\Admin\AppData\Local\Temp\TS-696C.exe"C:\Users\Admin\AppData\Local\Temp\TS-696C.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB