Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
28-12-2024 19:25
General
-
Target
2024-12-28_a1bfb11cb6cec5e9623ff873bc9dab76_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
4.9MB
-
MD5
a1bfb11cb6cec5e9623ff873bc9dab76
-
SHA1
241d93902bc6b488fe68c680dfa49b47763f8a6e
-
SHA256
43c6440b532160e1109cf036f42671964e81a98e35d05520bcbd54367c081be8
-
SHA512
b597729eea85c8470c691027c49ee60854b08b5a59998c20366b134f8e650ceeadea9b1118e96172870226c3842624115a401394a1f4a8c6cbdc9fbf0ebdcff4
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnD:r56utgpPFotBER/mQ32lUV
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-28_a1bfb11cb6cec5e9623ff873bc9dab76_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-28_a1bfb11cb6cec5e9623ff873bc9dab76_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery