Extracted

• • Target

    67593a87ba04b2e579417b8de747f9b063a656292bd47793670a0d1db52d7915

  • Size

    1.5MB

  • MD5

    3d6266994b6a6ab81ed2b6906e401f22

  • SHA1

    7641eada4b3841d2763ee904505518e22a6b59ab

  • SHA256

    67593a87ba04b2e579417b8de747f9b063a656292bd47793670a0d1db52d7915

  • SHA512

    e367fbe5643da89e54a5fa7ab47bfd9155bfdc68115eed32d3e3a417ef3f55e2a897d47e9b8736f4b5fea28fbce6fe8f97b67049366761b2bf6e161b9b91c15c

  • SSDEEP

    24576:i/k+YRDw0pskyxARw0dymEjjzF5OJhC0BJKpSg1MlBqWfwD1a:Sk3DVpsx6Rf0Fjjz8C4ISg1OACwD1

  Score

  10^/10

  cobaltstrikebackdoortrojanpersistence

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • Modifies Installed Components in the registry

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2