cobaltstrike | afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba

Analysis

max time kernel
151s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 03:06

Target

afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba.exe
Size

307KB
MD5

c3957a2ddcb861f29cb89dab90720d08
SHA1

6ba250273e538b72e789c71f9e78bfe9b3697ea3
SHA256

afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba
SHA512

801f9c95f479a01caa75c0f185996a7a9cf1c16c52e0e806d90b084a6c62d8a652a7a84e753b8a377c65e1046810aa286c64db7f1bfeb8e53a5d8797f9ab19a1
SSDEEP

6144:mTfzOT72Y0STzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO3PECYeixlYGic+:mTra7SS6YsY1UMqMZJYSN7wbstO38fv4

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba.exe
"C:\Users\Admin\AppData\Local\Temp\afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba.exe"
1⤵
PID:4664

memory/4664-132-0x0000000000980000-0x00000000009D0000-memory.dmp

Filesize
320KB

Download
memory/4664-133-0x0000000000980000-0x00000000009D0000-memory.dmp

Filesize
320KB

Download
memory/4664-134-0x000000007F6A0000-0x000000007F6E4000-memory.dmp

Filesize
272KB

Download