cobaltstrike | b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6 | Triage

Analysis

max time kernel
101s
max time network
135s
platform
windows10_x64
resource
win10v20210410
submitted
06-07-2021 16:06

Sharing

Report Analysis Logs

General

Target

b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6.exe
Size

321KB
MD5

9a2e1bb9ad6f1ccfeaa4c2c55637ae3b
SHA1

d42d55cab8637f847efdc1a01bcd5bb2d4668b7d
SHA256

b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6
SHA512

c8233171f957979936ea517dcabb3732e54b1cc19e89853d198b48c36f9609d2d8d0a0e75267a63162bd7d40371d22fbc62084441eaaec4d8670a5c2d985d1a6

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6.exe
"C:\Users\Admin\AppData\Local\Temp\b012145b80d5176d73ed67924be9b1290d7920f05bf436f37deca4799b6d88b6.exe"
1⤵
PID:4048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4048-114-0x00000000001C0000-0x00000000001F3000-memory.dmp

Filesize
204KB

Download
memory/4048-116-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/4048-117-0x0000000000520000-0x000000000066A000-memory.dmp

Filesize
1.3MB

Download
memory/4048-115-0x0000000000460000-0x000000000050E000-memory.dmp

Filesize
696KB

Download