Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-12-2024 07:42
General
-
Target
2024-12-27_2b147e06102e190bb0a0cfb7c977b735_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
2b147e06102e190bb0a0cfb7c977b735
-
SHA1
4b06042fe625d17358014d46b7fbae488e554179
-
SHA256
9cc64f53532e9df43eb527d559511a9b8ea2a92e87e7bc998630031387d4c0e1
-
SHA512
f2de917c2b087cf5516671d31ba4781d1c0b1154d34c38bb0bccc740a5328776cf8644454ed1d460eb46bf5c14b8e9961cfd271c86ec8fa7c10b7f450d1a732b
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnu:r56utgpPFotBER/mQ32lUY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-27_2b147e06102e190bb0a0cfb7c977b735_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-27_2b147e06102e190bb0a0cfb7c977b735_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery