Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
05/04/2025, 15:24
Behavioral task
behavioral1
Sample
2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe
Resource
win10v2004-20250314-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe
command="C:\Users\Admin\AppData\Local\Temp\2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
-
Target
2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe
-
Size
13.5MB
-
MD5
e2aaa1aaed9d660ab1e5fb8c880987c1
-
SHA1
e78d4c0c7a5bbe59739b2d23f2128837afcaabab
-
SHA256
afd39082f84826ca14ae8e32f39c8c5edf4d2f835f76ea065c8f1a9066601b42
-
SHA512
c93b4a8d0ba37298366e75b870efe3aef9411259ba8d44ec04ecf15241a7206cd8d9a73fd7b37a10cc6af46a9f32d8fe24299b6abbc06021b1655c570bcc2b6d
-
SSDEEP
98304:u3nOaNpzE8nhJRWtnajkhlni4DohnFMY7hQZPEMp1+w:mnOWE8hJRfYhlnlDAnFMY75C
Score
1/10