cobaltstrike | 622c97a71938df9c3f0d01abd18a31a64957359374ddd14a6ee9e586a061510d

Analysis

max time kernel
101s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 00:13

Target

622c97a71938df9c3f0d01abd18a31a64957359374ddd14a6ee9e586a061510d.exe
Size

312KB
MD5

7afd88642246a4d531d1f83e3569607f
SHA1

4bde933740cbec44c94b4d03edc27431f9e3473d
SHA256

622c97a71938df9c3f0d01abd18a31a64957359374ddd14a6ee9e586a061510d
SHA512

a55ef5b68ef3980160c3f99963ae600ac091d40bd48e804ca566476d5782f14e0a4b683f66db3f7c7f50f554e2a4790f137cc205835bdfe3c8e878109d488526
SSDEEP

6144:xWI+jNXUeLFTbCRTy7wzFzRODpyUOr2//l2TnLo0D5G:EIQUSbCvxzKy1rc/lsi

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\622c97a71938df9c3f0d01abd18a31a64957359374ddd14a6ee9e586a061510d.exe
"C:\Users\Admin\AppData\Local\Temp\622c97a71938df9c3f0d01abd18a31a64957359374ddd14a6ee9e586a061510d.exe"
1⤵
PID:4792

memory/4792-132-0x0000000000CE0000-0x0000000000D31000-memory.dmp

Filesize
324KB

Download
memory/4792-133-0x000000007EE30000-0x000000007EE74000-memory.dmp

Filesize
272KB

Download
memory/4792-134-0x0000000000CE0000-0x0000000000D31000-memory.dmp

Filesize
324KB

Download
memory/4792-135-0x000000007EE30000-0x000000007EE74000-memory.dmp

Filesize
272KB

Download