Analysis
-
max time kernel
135s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
28/02/2025, 21:23
General
-
Target
2025-02-28_e3a081e4a7539108f905ab9bcd7ca621_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe
-
Size
5.1MB
-
MD5
e3a081e4a7539108f905ab9bcd7ca621
-
SHA1
8db070e7778f0b4ae5b71046e944da216cecd0af
-
SHA256
d2c53be39fa43b94538c23030ca7a516d69355028897f7d7053c9db2584d7978
-
SHA512
4e4914bead014c8aa29ab28b8d49528f2357d31a3c970e788b83a1eb254209cb3773244a0c2eded63a86a4ca03cd73fd461051a39fa9d655573c558a0b18aece
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpn6:r56utgpPFotBER/mQ32lUM
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-02-28_e3a081e4a7539108f905ab9bcd7ca621_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-02-28_e3a081e4a7539108f905ab9bcd7ca621_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery