Overview

overview

10

Static

static

9

d8120a97d8...0a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6014511563440128.zip

  • Size

    458KB

  • Sample

    210608-8jhkryd6g2

  • MD5

    95cd0b278e8589e0396395a7c8b40ba4

  • SHA1

    285c4dcf0344bfd440acedba6eb3646760c2bc40

  • SHA256

    236c17ab988f207c9716409ce0735c944718a8ed4624078ba59716a24c550c54

  • SHA512

    341ed50dc95215368dbc663cb134d574f17f88174dc990db52be2343e1bc2bb2ce089ca82893ece91dfa33018af5ded41eeb500ecab0bd6e1fce2cc6d7b6250e

Score
10/10
cobaltstrikebackdoorcryptonepackertrojan

Malware Config

Targets

    • Target

      d8120a97d893e4e43f94f21bd89626141384ea5213bbb0738ef34b210b75eb0a

    • Size

      574KB

    • MD5

      1fa3a3e510232235c77fa9c055c9085d

    • SHA1

      9f1c5e0620a944b6bae89c8654ab49dae930e136

    • SHA256

      d8120a97d893e4e43f94f21bd89626141384ea5213bbb0738ef34b210b75eb0a

    • SHA512

      b51834f98573e36a14b2bfefa88b30d0bd485e8ffa3bf72774729fccd64a7af24b3d8ee220d4359e1de188d8ba1467496619254fe10f5b8e0e5f2050c8dd613d

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks