cobaltstrike | c31026364ef46dfb5ace4f4a0ac73e8b9f874dc517e3d052f3155d497c96d9bf

Analysis

max time kernel
299s
max time network
380s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 05:40

Target

c31026364ef46dfb5ace4f4a0ac73e8b9f874dc517e3d052f3155d497c96d9bf.exe
Size

307KB
MD5

7dffc7e2a8fc9d7240006bf7a98abde8
SHA1

0f77a9b9c4435d7a255cef7294832786d605da4a
SHA256

c31026364ef46dfb5ace4f4a0ac73e8b9f874dc517e3d052f3155d497c96d9bf
SHA512

265fbdb016929b03a2f441717fde7ded7c42ffb65dfa69b59223b87c2d054812f405fb8c1757d055576040089ebebed638577692c842f7de4a9cdbd3f96f6e26
SSDEEP

6144:2qzwT72Y0SqzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOIPECYeixlYGic9i:2C87SSFYsY1UMqMZJYSN7wbstOI8fveT

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c31026364ef46dfb5ace4f4a0ac73e8b9f874dc517e3d052f3155d497c96d9bf.exe
"C:\Users\Admin\AppData\Local\Temp\c31026364ef46dfb5ace4f4a0ac73e8b9f874dc517e3d052f3155d497c96d9bf.exe"
1⤵
PID:4236

memory/4236-132-0x0000000000DF0000-0x0000000000E40000-memory.dmp

Filesize
320KB

Download
memory/4236-133-0x0000000000DF0000-0x0000000000E40000-memory.dmp

Filesize
320KB

Download
memory/4236-134-0x000000007F010000-0x000000007F054000-memory.dmp

Filesize
272KB

Download