cobaltstrike | c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943

Analysis

max time kernel
173s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 05:22

Target

c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe
Size

311KB
MD5

53129787c8e72fc5db792ebfceecc577
SHA1

f12cacb2958001f554096f6df6734d37884322c5
SHA256

c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943
SHA512

139b89a71db870ec74baabb4f82712be1dda0f1f3eea9dde9c9020eea4d8dd5c99092c1fcbfe022ae361d73f6f81edb7d910ed105721b5dadc93ab307f3ac8a2
SSDEEP

6144:nS/3wVyBrl40pP/MHLdL1hALe+2NirdrQdZ5wUKD0R:nm3my74w/MdoLT2NKcPwY

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe
"C:\Users\Admin\AppData\Local\Temp\c640dcc4d01eb47f5b4a8be41b620180dc9d15f52a57adef1cc4c46fcab56943.exe"
1⤵
PID:2560

memory/2560-132-0x00000000004A0000-0x00000000004F9000-memory.dmp

Filesize
356KB

Download
memory/2560-133-0x00000000004A0000-0x00000000004F9000-memory.dmp

Filesize
356KB

Download
memory/2560-134-0x000000007F930000-0x000000007F974000-memory.dmp

Filesize
272KB

Download