cobaltstrike | b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6 | Triage

Analysis

max time kernel
99s
max time network
112s
platform
windows10_x64
resource
win10v20210410
submitted
06-07-2021 15:48

Sharing

Report Analysis Logs

General

Target

klinch.exe
Size

321KB
MD5

9a2e1bb9ad6f1ccfeaa4c2c55637ae3b
SHA1

d42d55cab8637f847efdc1a01bcd5bb2d4668b7d
SHA256

b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6
SHA512

c8233171f957979936ea517dcabb3732e54b1cc19e89853d198b48c36f9609d2d8d0a0e75267a63162bd7d40371d22fbc62084441eaaec4d8670a5c2d985d1a6

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\klinch.exe
"C:\Users\Admin\AppData\Local\Temp\klinch.exe"
1⤵
PID:3980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3980-114-0x00000000001C0000-0x00000000001F3000-memory.dmp

Filesize
204KB

Download
memory/3980-115-0x00000000004B0000-0x00000000004F7000-memory.dmp

Filesize
284KB

Download
memory/3980-117-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/3980-116-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download