cobaltstrike | e094dd038dbc7ac55c2eb8e7978a436f5b12ab4526db5c5f5ec3c9b7a82d2298

Analysis

max time kernel
46s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30-11-2022 03:12

Target

e094dd038dbc7ac55c2eb8e7978a436f5b12ab4526db5c5f5ec3c9b7a82d2298.exe
Size

312KB
MD5

f314d5ad65ff2ca31863dc594a675f7e
SHA1

2fc84b52d470a14dd53438013a2fb16d971a63c8
SHA256

e094dd038dbc7ac55c2eb8e7978a436f5b12ab4526db5c5f5ec3c9b7a82d2298
SHA512

da0c2d26e36603150eaed903b730bffd39e965076bc50ebcc01e003376efbace748a37ab62b7c968586012d24f67b59e77cf601d597d7fb030ee89bec091568a
SSDEEP

6144:I+1VyBsl40pPdMHLdL1hALe+2NirdrQdZDwUKD0gc8:IEys4wdMdoLT2NKc5wv

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\e094dd038dbc7ac55c2eb8e7978a436f5b12ab4526db5c5f5ec3c9b7a82d2298.exe
"C:\Users\Admin\AppData\Local\Temp\e094dd038dbc7ac55c2eb8e7978a436f5b12ab4526db5c5f5ec3c9b7a82d2298.exe"
1⤵
PID:1308

memory/1308-54-0x0000000000A10000-0x0000000000A69000-memory.dmp

Filesize
356KB

Download
memory/1308-55-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

Filesize
8KB

Download
memory/1308-56-0x0000000000A10000-0x0000000000A69000-memory.dmp

Filesize
356KB

Download
memory/1308-57-0x000000007EF60000-0x000000007EFA4000-memory.dmp

Filesize
272KB

Download