Overview

overview

10

Static

static

a.exe

windows7_x64

10

a.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    04-07-2022 06:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a.exe

  • Size

    582KB

  • MD5

    9e2c51bf73faf49d7bac7000d8212fea

  • SHA1

    2626c3ddcf66211658af796d81303008701a5134

  • SHA256

    6818881fa2f414dd471e2bbbd5d0321c94e66089737a603f6dc55d6f38b2f487

  • SHA512

    9fc7ca40140562c7632a3b963d1853564cb35b20e1134c3f9cd449a3282db14c3c1affa307ef4c192899d6256652b3e7da93b633b68a89293a3cd403bdfc3023

Score
10/10
cobaltstrikebackdoorsuricatatrojan

Malware Config

Signatures

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike
  • suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

    suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\a.exe
    "C:\Users\Admin\AppData\Local\Temp\a.exe"
    1⤵
      PID:3888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3888-130-0x0000000000400000-0x0000000000441000-memory.dmp
      Filesize

      260KB

      Download
    • memory/3888-131-0x0000000000450000-0x000000000049F000-memory.dmp
      Filesize

      316KB

      Download
    • memory/3888-132-0x0000000000450000-0x000000000049F000-memory.dmp
      Filesize

      316KB

      Download