Overview

overview

10

Static

static

lsass.exe

windows7-x64

1

lsass.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    lsass.exe
  • Size 18KB
  • Sample220716-sdbxdsdchm
  • SHA256 e65e6051980701ae9bcd600fd08c7be44f8f299c8ad68d8cbddf704f9757c870
  • MD5 SHA1 SHA512
Score
10/10
cobaltstrike0backdoorsuricatatrojan

Malware Config

Extracted

Family

  • cobaltstrike

Botnet

  • 0

Attributes
  • watermark

    0

Targets

    • Target
      lsass.exe
    • Size 18KB
    • SHA256 e65e6051980701ae9bcd600fd08c7be44f8f299c8ad68d8cbddf704f9757c870
    • MD5 SHA1 SHA512
    Score
    10/10
    cobaltstrike0backdoorsuricatatrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • suricata: ET MALWARE Cobalt Strike Beacon Observed

      suricata: ET MALWARE Cobalt Strike Beacon Observed

      suricata

    • suricata: ET MALWARE Successful Cobalt Strike Shellcode Download (x64) M1

      suricata: ET MALWARE Successful Cobalt Strike Shellcode Download (x64) M1

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks