Analysis

  • max time kernel
    93s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-02-2025 04:03

General

  • Target

    2025-02-02_3f03c1dd158796802d25973c75f6c00e_cobalt-strike_cobaltstrike_poet-rat.exe

  • Size

    6.0MB

  • MD5

    3f03c1dd158796802d25973c75f6c00e

  • SHA1

    288557bc317daf5ef6c4aaa669e506c6623203ff

  • SHA256

    4686923ed7ae1a57f69267f1c4c6b22f71942babd382bb14319fc5595626bd65

  • SHA512

    c1a694c8b769853be0e13a114ea376c82e225010a403df6e56122302d5b7904241b69957e533842834d77c6e84363c6f4164b21db60d1e4cb5542b880a34031b

  • SSDEEP

    98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUa:eOl56utgpPF8u/7a

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-02-02_3f03c1dd158796802d25973c75f6c00e_cobalt-strike_cobaltstrike_poet-rat.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-02-02_3f03c1dd158796802d25973c75f6c00e_cobalt-strike_cobaltstrike_poet-rat.exe"
    1⤵
      PID:1364

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1364-0-0x00007FF6CF200000-0x00007FF6CF554000-memory.dmp

      Filesize

      3.3MB