Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/04/2025, 15:24

Errors

Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe command="C:\Users\Admin\AppData\Local\Temp\2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

General

  • Target

    2025-04-05_e2aaa1aaed9d660ab1e5fb8c880987c1_cobalt-strike_poet-rat_sliver.exe

  • Size

    13.5MB

  • MD5

    e2aaa1aaed9d660ab1e5fb8c880987c1

  • SHA1

    e78d4c0c7a5bbe59739b2d23f2128837afcaabab

  • SHA256

    afd39082f84826ca14ae8e32f39c8c5edf4d2f835f76ea065c8f1a9066601b42

  • SHA512

    c93b4a8d0ba37298366e75b870efe3aef9411259ba8d44ec04ecf15241a7206cd8d9a73fd7b37a10cc6af46a9f32d8fe24299b6abbc06021b1655c570bcc2b6d

  • SSDEEP

    98304:u3nOaNpzE8nhJRWtnajkhlni4DohnFMY7hQZPEMp1+w:mnOWE8hJRfYhlnlDAnFMY75C

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads