Overview

overview

6

Static

static

3

2025-03-31...ch.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-31_217413ee1e51eedd5ba489deb60a89f6_cobalt-strike_poet-rat_sliver_snatch

  • Size

    10.7MB

  • Sample

    250331-s1hy8asyav

  • MD5

    217413ee1e51eedd5ba489deb60a89f6

  • SHA1

    df1a2daff479f787403978542fffcf3708a1abc6

  • SHA256

    97b28ee4fb0d8f90a93210be04e39c935476c9541469a1f79fce6096baf88fdd

  • SHA512

    899fb06a124a253b0c19819ea4936dbeba60f28516e0ea038badc6eac5cbc36d8324405b23012935f5f2b605f4d3643f94816e372d8464af2a11c67f9f10995a

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRmhRBhR1hRq:DAkLRLRxRtRSRLR3Rq

Score
6/10
persistence

Malware Config

Targets

    • Target

      2025-03-31_217413ee1e51eedd5ba489deb60a89f6_cobalt-strike_poet-rat_sliver_snatch

    • Size

      10.7MB

    • MD5

      217413ee1e51eedd5ba489deb60a89f6

    • SHA1

      df1a2daff479f787403978542fffcf3708a1abc6

    • SHA256

      97b28ee4fb0d8f90a93210be04e39c935476c9541469a1f79fce6096baf88fdd

    • SHA512

      899fb06a124a253b0c19819ea4936dbeba60f28516e0ea038badc6eac5cbc36d8324405b23012935f5f2b605f4d3643f94816e372d8464af2a11c67f9f10995a

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRmhRBhR1hRq:DAkLRLRxRtRSRLR3Rq

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks