Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-01-2025 15:33
General
-
Target
2025-01-02_239ce3b3f784755934b53ee315e05136_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
5.0MB
-
MD5
239ce3b3f784755934b53ee315e05136
-
SHA1
e211ce87ee1cccee71082aba08a61c459f308c10
-
SHA256
766a4cecee5e889422d9a687e347c32c5afb1509632174b909047285f9120e07
-
SHA512
440f2dc28ceb910431dae561e2c7eac20c2df0eba4df8a89d30b0187b415e2a7cd46456865a019f26469a4c8c457ae9853680573fac44d1060aba0908380a903
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpns:r56utgpPFotBER/mQ32lUO
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-02_239ce3b3f784755934b53ee315e05136_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-02_239ce3b3f784755934b53ee315e05136_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery