cobaltstrike | c1a1e4619dda48fced7b552c57dfc255b63aa08edf4ae4813368192ce465c816

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 23:23

Target

c1a1e4619dda48fced7b552c57dfc255b63aa08edf4ae4813368192ce465c816.exe
Size

315KB
MD5

90ec4b922195c30feb3f8897bc7933ba
SHA1

940c762796222f2b523e817170c994983188cb52
SHA256

c1a1e4619dda48fced7b552c57dfc255b63aa08edf4ae4813368192ce465c816
SHA512

0ac000a4314978023158d081e4bf232216a45e24d74acb17344c9c08c3f58ebc897420ad6b0bd86386f072de55e73a403c6fbb64a1949b9f5a43a4b8e903b01b
SSDEEP

6144:Hq3gCProqWYHtSVYnI+tnYDcMbY4FmNzNwm+MhUa4xO1BcC1cT:Hq3hz1NFnI+1Kb5KzNVNFPcnT

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c1a1e4619dda48fced7b552c57dfc255b63aa08edf4ae4813368192ce465c816.exe
"C:\Users\Admin\AppData\Local\Temp\c1a1e4619dda48fced7b552c57dfc255b63aa08edf4ae4813368192ce465c816.exe"
1⤵
PID:5100

memory/5100-132-0x0000000000FA0000-0x0000000000FFB000-memory.dmp

Filesize
364KB

Download
memory/5100-133-0x000000007F5F0000-0x000000007F634000-memory.dmp

Filesize
272KB

Download
memory/5100-134-0x0000000000FA0000-0x0000000000FFB000-memory.dmp

Filesize
364KB

Download