cobaltstrike | 41709eb98255b6ee2efae2d378f6af37baf6880b1c295d774d8277d4fb4ab356 | Triage

Analysis

max time kernel
219s
max time network
299s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03-12-2022 08:58

Sharing

Report Analysis Logs

General

Target

beacon.exe
Size

278KB
MD5

ef66239a2b745d1cb3e4c4150a0d33bf
SHA1

3c541c478d0d7eddb90ed70313399a5367947533
SHA256

41709eb98255b6ee2efae2d378f6af37baf6880b1c295d774d8277d4fb4ab356
SHA512

43c817ffb8b662dbae089d9b80cc3c7a79ca05aa11d8adc9808b0ed0293cc8f66fc1200b2a73a7f1f2c111368351a9dd93df60ec066a6a02152c01dbe47da37e
SSDEEP

6144:lRbL2KmRdPQxPdfUzllbG+gMEU0CCtKU:lZLTm8PdkllbG+QUlCtKU

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\beacon.exe
"C:\Users\Admin\AppData\Local\Temp\beacon.exe"
1⤵
PID:920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/920-54-0x0000000000660000-0x0000000000693000-memory.dmp

Filesize
204KB

Download
memory/920-55-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download
memory/920-56-0x00000000006A0000-0x00000000006DD000-memory.dmp

Filesize
244KB

Download