Overview

overview

7

Static

static

3

2025-03-30...ch.exe

windows7-x64

7

2025-03-30...ch.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-30_48667d0bf92ec8eb90045aaccb4fa65a_cobalt-strike_poet-rat_sliver_snatch

  • Size

    9.8MB

  • Sample

    250330-zw5qrayry9

  • MD5

    48667d0bf92ec8eb90045aaccb4fa65a

  • SHA1

    7a3c1967556b8a8eb00a982fe3a6797f12219023

  • SHA256

    561904f7b07ff182cd9e15ff15567341644a4756bb50854cafe9ce8192d5fda6

  • SHA512

    acc29e23bfa633aa0e20cd0e6a6df58f30bfe4d6a7ad2d8970bce90bcd7ac89be8bb3062c7146b7e8773ad365263ec5a206a8e01c8468fcbedfb86ebc7fdf646

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRbhR2hRn:DAkLRLRxRYRtRiRn

Score
7/10
persistence

Malware Config

Targets

    • Target

      2025-03-30_48667d0bf92ec8eb90045aaccb4fa65a_cobalt-strike_poet-rat_sliver_snatch

    • Size

      9.8MB

    • MD5

      48667d0bf92ec8eb90045aaccb4fa65a

    • SHA1

      7a3c1967556b8a8eb00a982fe3a6797f12219023

    • SHA256

      561904f7b07ff182cd9e15ff15567341644a4756bb50854cafe9ce8192d5fda6

    • SHA512

      acc29e23bfa633aa0e20cd0e6a6df58f30bfe4d6a7ad2d8970bce90bcd7ac89be8bb3062c7146b7e8773ad365263ec5a206a8e01c8468fcbedfb86ebc7fdf646

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRbhR2hRn:DAkLRLRxRYRtRiRn

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks