Analysis
-
max time kernel
104s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
06/04/2025, 14:25
General
-
Target
2025-04-06_9ffe7a0db36049dee894f67eba5a6b06_cobalt-strike_poet-rat_sliver_snatch.exe
-
Size
6.8MB
-
MD5
9ffe7a0db36049dee894f67eba5a6b06
-
SHA1
bea03127e0301512c78e5f2e43e8782a74d9cea2
-
SHA256
f9e4d75d2faaf6985bdc3c9bf65e3df4f592ff932147250f6b9a94c91f8841b7
-
SHA512
ca8e4dc5a9db5d1467c52d5ece59341ae142bb457424d6899e8091cd1c57b2d40b1878ac28f5b31cc79022516786c32721d43cdc12d296070f9226f26dc99844
-
SSDEEP
98304:v/fMyk3pfm+v/ZQS5lUgubq8NyNH2Xh51YcyDF/:v/mpfJSqjgN6/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-06_9ffe7a0db36049dee894f67eba5a6b06_cobalt-strike_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-06_9ffe7a0db36049dee894f67eba5a6b06_cobalt-strike_poet-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery