cobaltstrike | a75dd473dd226db1dca1b97f814aa1085936fb33ccc983fe359cc645a1ccf559

Analysis

max time kernel
182s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 03:47

Target

a75dd473dd226db1dca1b97f814aa1085936fb33ccc983fe359cc645a1ccf559.exe
Size

307KB
MD5

72d1a9a47b4d88869387dadf34a56b7f
SHA1

61eb36e4c7bb300ccb044003bb66244548393d96
SHA256

a75dd473dd226db1dca1b97f814aa1085936fb33ccc983fe359cc645a1ccf559
SHA512

c47521211fd560478708b4790094608823eaac18e2185a6fd2745dc18000ba0381052c364de32785584f995ee328d1d31c79997daf4c7a93cf19a9f56e333c6c
SSDEEP

6144:K0vzyT72Y0SPzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO7PECYeixlYGicZ:K0bW7SSWYsY1UMqMZJYSN7wbstO78fvP

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\a75dd473dd226db1dca1b97f814aa1085936fb33ccc983fe359cc645a1ccf559.exe
"C:\Users\Admin\AppData\Local\Temp\a75dd473dd226db1dca1b97f814aa1085936fb33ccc983fe359cc645a1ccf559.exe"
1⤵
PID:2220

memory/2220-132-0x0000000000150000-0x00000000001A0000-memory.dmp

Filesize
320KB

Download
memory/2220-133-0x0000000000150000-0x00000000001A0000-memory.dmp

Filesize
320KB

Download
memory/2220-134-0x000000007F980000-0x000000007F9C4000-memory.dmp

Filesize
272KB

Download