Analysis
-
max time kernel
104s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
21/03/2025, 08:54
General
-
Target
2025-03-21_ec2d3df6d533f61689e274ca25f2ff8c_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe
-
Size
5.0MB
-
MD5
ec2d3df6d533f61689e274ca25f2ff8c
-
SHA1
18a822a5fdf845d1e2a1568c42a0528327d900c0
-
SHA256
fb6246f9a23c4bc7c57978f0f273dc1ceea17a1b6f74bc120c34977f55806699
-
SHA512
2d48ec256b2ff364f0c1189d4f0960d47c324f0fe2f433dfc19cdd1b0328b9f2b6ef70a46dfd323b2f7557279d3442efa2e06c21df3dd58da89c2af247a8a14e
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpni:r56utgpPFotBER/mQ32lUE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-21_ec2d3df6d533f61689e274ca25f2ff8c_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-21_ec2d3df6d533f61689e274ca25f2ff8c_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery