Overview

overview

10

Static

static

10

2024-12-29...at.exe

windows7-x64

10

2024-12-29...at.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2024 06:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-12-29_937caec60c4b59cae6447568dbeb35ff_cobalt-strike_cobaltstrike_poet-rat.exe

  • Size

    6.0MB

  • MD5

    937caec60c4b59cae6447568dbeb35ff

  • SHA1

    8f4ca14c0ff26eea82a653b1fc0f3e8c69691341

  • SHA256

    84345e4f4cd3632298aaab6f26b926369e071a61cb3836e61618d558aa21e72b

  • SHA512

    6792ecce4db3e3ce0010fc56d3b8d335f8e45cf385fa60dada7367736f4b94024fd1c5e31f169965d766b96e211a579fd5f0311629ba459a555dc795e6671a8c

  • SSDEEP

    98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUA:eOl56utgpPF8u/7A

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-12-29_937caec60c4b59cae6447568dbeb35ff_cobalt-strike_cobaltstrike_poet-rat.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-12-29_937caec60c4b59cae6447568dbeb35ff_cobalt-strike_cobaltstrike_poet-rat.exe"
    1⤵
      PID:1488

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1488-0-0x00007FF79FE60000-0x00007FF7A01B4000-memory.dmp

      Filesize

      3.3MB

      Download

    • memory/1488-1-0x00007FF79FE60000-0x00007FF7A01B4000-memory.dmp

      Filesize

      3.3MB

      Download