cobaltstrike | bf271c7f79b2cf0421293dddd7203731a777993836a33049be022442113949df

Analysis

max time kernel
148s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 06:01

Target

bf271c7f79b2cf0421293dddd7203731a777993836a33049be022442113949df.exe
Size

307KB
MD5

a1e70a0976f138b0921423530aedf190
SHA1

c92178348e4afcf021b4e845d060e3a89f9bfc29
SHA256

bf271c7f79b2cf0421293dddd7203731a777993836a33049be022442113949df
SHA512

ed89183d1f504a931f46d115d5d33aa119e436a9ede5b8b317b07307c27f6feb4929b57b18911949c59d674d3e8a79e17c35a413f003abae786f85e19f30d5b8
SSDEEP

6144:K0vzRT72Y0SszinYKTY1SQshfRPVQe1MZkIYSccr7wbstOOPECYeixlYGicB:K0bt7SSPYsY1UMqMZJYSN7wbstOO8fvf

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\bf271c7f79b2cf0421293dddd7203731a777993836a33049be022442113949df.exe
"C:\Users\Admin\AppData\Local\Temp\bf271c7f79b2cf0421293dddd7203731a777993836a33049be022442113949df.exe"
1⤵
PID:4508

memory/4508-132-0x00000000002A0000-0x00000000002F0000-memory.dmp

Filesize
320KB

Download
memory/4508-133-0x00000000002A0000-0x00000000002F0000-memory.dmp

Filesize
320KB

Download
memory/4508-134-0x000000007F750000-0x000000007F794000-memory.dmp

Filesize
272KB

Download