Analysis
-
max time kernel
104s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
25/03/2025, 11:25
General
-
Target
2025-03-25_5f1d5e381fbf23d94c949fe1db527dc8_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe
-
Size
5.0MB
-
MD5
5f1d5e381fbf23d94c949fe1db527dc8
-
SHA1
7044a3104d0d61a41665df6176ed774a0c708b0b
-
SHA256
e38ffdaab7a06261672730e723f433571c97c7a4bba11582f9adfce9a555306d
-
SHA512
a59b830fa45e3a566a7884e87cb19e6a7524d4c85f125de63ea93a0f155cb53f8ce40ad3bbd13ca2d8869c2c2e6ba01cd8b00281f30455885a189a750a56cfde
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnT:r56utgpPFotBER/mQ32lU1
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-25_5f1d5e381fbf23d94c949fe1db527dc8_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-25_5f1d5e381fbf23d94c949fe1db527dc8_amadey_cobalt-strike_cobaltstrike_poet-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery