cobaltstrike | a3f087f5d974630a5af02c817a6544a6d142f7955e60086a6f3b53e9ca99de7c | Triage

Resubmissions

15-03-2022 16:56

220315-vfwexsdff3 10

28-04-2021 12:06

210428-jlqb6yrq2n 10

Analysis

max time kernel
137s
max time network
142s
platform
windows7_x64
resource
win7v20210410
submitted
28-04-2021 12:06

Sharing

Report Analysis Logs

General

Target

a3f087f5d974630a5af02c817a6544a6d142f7955e60086a6f3b53e9ca99de7c.exe
Size

19KB
MD5

c6331ff09d46716462299f1826779005
SHA1

7102086dec47a9c4b099fabb4d8baee2b283b638
SHA256

a3f087f5d974630a5af02c817a6544a6d142f7955e60086a6f3b53e9ca99de7c
SHA512

f39f7d81f958a48a45bedb2e0e146343c5000339ee1339c450c575a690df4c797f477ff0d1ec9408c960c4f8975f854ba629c500a04a29874cd15672e4e3fc24

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\a3f087f5d974630a5af02c817a6544a6d142f7955e60086a6f3b53e9ca99de7c.exe
"C:\Users\Admin\AppData\Local\Temp\a3f087f5d974630a5af02c817a6544a6d142f7955e60086a6f3b53e9ca99de7c.exe"
1⤵
PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1268-59-0x00000000008E0000-0x00000000008E2000-memory.dmp

Filesize
8KB

Download
memory/1268-60-0x000007FEFB991000-0x000007FEFB993000-memory.dmp

Filesize
8KB

Download