Overview

overview

10

Static

static

10

c43b675016...29.exe

windows7-x64

10

c43b675016...29.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    160s
  • max time network
    177s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 05:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c43b675016f74e094d2de626e227590620858d2fd034c5dde1457bfe11306629.exe

  • Size

    305KB

  • MD5

    8be9adaad7c6870bc6d7e04501ee1b88

  • SHA1

    b75762c5715c5a101b7851f6eb06bc34e2f27a51

  • SHA256

    c43b675016f74e094d2de626e227590620858d2fd034c5dde1457bfe11306629

  • SHA512

    671e904372f681593e45157233e6d5f1e9735d03e8b00ebae3172f5805d5d5ab79da2bff7d9d3f11d583df0d5c6767739c1396f2b6b9d3ea1e9e3d5757995e63

  • SSDEEP

    6144:5GSzvT72Y0ShzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOZPECYeixlYGicB:5Gqr7SS4YsY1UMqMZJYSN7wbstOZ8fvf

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\c43b675016f74e094d2de626e227590620858d2fd034c5dde1457bfe11306629.exe
    "C:\Users\Admin\AppData\Local\Temp\c43b675016f74e094d2de626e227590620858d2fd034c5dde1457bfe11306629.exe"
    1⤵
      PID:1192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1192-132-0x0000000000B70000-0x0000000000BC0000-memory.dmp
      Filesize

      320KB

      Download
    • memory/1192-133-0x0000000000B70000-0x0000000000BC0000-memory.dmp
      Filesize

      320KB

      Download
    • memory/1192-134-0x000000007F110000-0x000000007F154000-memory.dmp
      Filesize

      272KB

      Download