Extracted

• • Target

    8c144f7d80cb70fc428dba1860dc8c19b19491acc7633d57c836ce29873754d0

  • Size

    4.9MB

  • MD5

    44bbdef11c9b3468bf1826999eef5bcb

  • SHA1

    30f13f1903a31c21fb6cff1471e99cc2ef031600

  • SHA256

    8c144f7d80cb70fc428dba1860dc8c19b19491acc7633d57c836ce29873754d0

  • SHA512

    4c87c6adc6be200964a88d17bb943dddf94994d7ebbbed7ca5191183c234dca77cd73026d6db3fdb373dbf3d8d7333f80f3e189c4016d70e982eafedc9abef4f

  • SSDEEP

    98304:nHUIss4HTUFA7IGcJ/108bu3I+iZ7q1zPPXNAjtVa/u:nFnUcJ1Vq3I+7NAjtVa/u

  Score

  10^/10

  cobaltstrike0backdoortrojan

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2