cobaltstrike | 9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2023, 18:56

Target

9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1.exe
Size

19KB
MD5

ef10abcd4ada4523cb89cf3cc9ab8f98
SHA1

5019aa5933a9ac5e4b1d7b4d60db1535a7075685
SHA256

9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1
SHA512

6ee408a94afd6fcafb8ab77c327a59f56e96f56eba7b8b75526edf31ecb9f39b2fd3b3c3c7cb649e9894669b50794046ec3c504311d0127b65fb5169ab831460
SSDEEP

192:aV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27daWF8qa1Dojjgi:0qaCF31cix+Dc4zj8RFF46gi

Score

10^/10

Family

cobaltstrike

http://192.168.22.52:4445/Xbk8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1.exe
"C:\Users\Admin\AppData\Local\Temp\9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1.exe"
1⤵
PID:1096

memory/1096-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1096-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download