Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-01-2025 06:04

General

  • Target

    2025-01-28_6546cbc9dc745a7fd678f2ea209913ff_cobalt-strike_cobaltstrike_poet-rat.exe

  • Size

    5.9MB

  • MD5

    6546cbc9dc745a7fd678f2ea209913ff

  • SHA1

    34b65b1112d4bac792ff2c1a5feaa86b7e3b4936

  • SHA256

    d083da103cb8ca0f31aa35c3de3a769cf81f2d1817ce30db11a4f3ad4e699c14

  • SHA512

    638cd6a9a59735e16fc450d62c840117f88a9c002b11d0ecee6e56db332adf5188a03bb5fa7a1fab1cdd91534bfff0351d8283cdf9f1705a9653d7d60165d875

  • SSDEEP

    98304:demTLkNdfE0pZ3u56utgpPFotBER/mQ32lU0:E+b56utgpPF8u/70

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-01-28_6546cbc9dc745a7fd678f2ea209913ff_cobalt-strike_cobaltstrike_poet-rat.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-01-28_6546cbc9dc745a7fd678f2ea209913ff_cobalt-strike_cobaltstrike_poet-rat.exe"
    1⤵
      PID:3748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3748-0-0x00007FF768AE0000-0x00007FF768E34000-memory.dmp

      Filesize

      3.3MB