Analysis
-
max time kernel
81s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
21-06-2024 13:06
Behavioral task
behavioral1
Sample
a-2.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a-2.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
a-2.exe
-
Size
464KB
-
MD5
904481c66d065e2c167e344781be834c
-
SHA1
e24ef3b85a85cbc77af77dbb054000529cbd8eaa
-
SHA256
860f1d5c5e0d6876d0a938554da847b4974a3428d41004626d33bc80de60c5e6
-
SHA512
e81b8146180e1390b1d5b68cf5f4fb42a65a67a067d0ac49bf8843f71acf811b8e6f2e2e5f7ac1fe56c6840c08fe970809671eacb2498d8ca48ec5ada9b72a39
-
SSDEEP
6144:ub9iLpU0OeLNYXeUGaOKOlHcDwMZVvJqVG5d1IpMyibgkTZI6jHID90aMBX+H/:oqpU0OeLNY8aOxHwwiv3d6tevox8BXo
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
Attributes
-
watermark
0
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3132-1-0x000001F738880000-0x000001F7388D0000-memory.dmpFilesize
320KB
-
memory/3132-2-0x000001F7386E0000-0x000001F73872F000-memory.dmpFilesize
316KB
-
memory/3132-3-0x000001F738880000-0x000001F7388D0000-memory.dmpFilesize
320KB
-
memory/3132-4-0x000001F7386E0000-0x000001F73872F000-memory.dmpFilesize
316KB