Overview

overview

10

Static

static

Sandra

windows10_x64

10

Win10Max

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    AnnualReport.exe
  • Size 441KB
  • Sample210203-l7gxbpmxls
  • SHA256 52bbe09c7150ea66269c71bac8d0237fb0e6b0cae4ca63ab19807c310d6a1a0b
  • MD5 SHA1 SHA512
Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

  • cobaltstrike

Version

  • windows/download_exec

C2

  • http://topservicebin.com:443/wp-includes/eo.png

Targets

    • Target
      AnnualReport.exe
    • Size 441KB
    • SHA256 52bbe09c7150ea66269c71bac8d0237fb0e6b0cae4ca63ab19807c310d6a1a0b
    • MD5 SHA1 SHA512
    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks