cobaltstrike | c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943

Analysis

max time kernel
36s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-12-2022 05:22

Target

c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe
Size

311KB
MD5

53129787c8e72fc5db792ebfceecc577
SHA1

f12cacb2958001f554096f6df6734d37884322c5
SHA256

c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943
SHA512

139b89a71db870ec74baabb4f82712be1dda0f1f3eea9dde9c9020eea4d8dd5c99092c1fcbfe022ae361d73f6f81edb7d910ed105721b5dadc93ab307f3ac8a2
SSDEEP

6144:nS/3wVyBrl40pP/MHLdL1hALe+2NirdrQdZ5wUKD0R:nm3my74w/MdoLT2NKcPwY

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe
"C:\Users\Admin\AppData\Local\Temp\c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe"
1⤵
PID:536

memory/536-54-0x00000000009F0000-0x0000000000A49000-memory.dmp

Filesize
356KB

Download
memory/536-55-0x0000000075CF1000-0x0000000075CF3000-memory.dmp

Filesize
8KB

Download
memory/536-56-0x00000000009F0000-0x0000000000A49000-memory.dmp

Filesize
356KB

Download
memory/536-57-0x000000007EF60000-0x000000007EFA4000-memory.dmp

Filesize
272KB

Download