Analysis
-
max time kernel
95s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30/12/2024, 02:05
General
-
Target
coba164s.exe
-
Size
318KB
-
MD5
1715d2b27d963988cac67a955812e4d0
-
SHA1
8831d9c375b0f3df5e40731d091d468d5764dad2
-
SHA256
d61f250ce0bc5dd194878de7495bf657bf9749ead64130935c24b7b12978e683
-
SHA512
ea5a9a8266cba81ec3232c1ae41897f8ef6972851c15cb51fd364ee895f4edcff2e62babef8a278560e17b33e639ab1b0024c1de7024d4d0b3180f60adb1acc0
-
SSDEEP
6144:4FKitXrJ6qUIbupzBTk1TRnK+kuuEci72o0i/p1IEh:OstIeBTcK+kuuFFo0l
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://1nevadasports.com:443/erDB
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family
Processes
-
C:\Users\Admin\AppData\Local\Temp\coba164s.exe"C:\Users\Admin\AppData\Local\Temp\coba164s.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB