Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-12-2024 07:52
General
-
Target
2024-12-27_84af7aa198ba4fbae162c8d343c091b1_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
84af7aa198ba4fbae162c8d343c091b1
-
SHA1
fb1116d2b206255381f721104d187950deb721f0
-
SHA256
9df2eb4e9aee637b2d38802e4c3192123a1f68fb87540a3718839510dbd5d0f5
-
SHA512
0b4a5e23ae8cd18e143432f6f9ada1712df6b2d04857c9ee22a260de9755cff32eb55bf7010e4bc128b4e3bb7885e76dd97d6171f22d6717a772324b3b79323f
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpny:r56utgpPFotBER/mQ32lUg
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-27_84af7aa198ba4fbae162c8d343c091b1_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-27_84af7aa198ba4fbae162c8d343c091b1_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery