cobaltstrike | ee30601c6cd2d8dc6bfe7fabaf94049406efc1bbe5892aa3af5e3e2f385ea94a

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 22:56

Target

ee30601c6cd2d8dc6bfe7fabaf94049406efc1bbe5892aa3af5e3e2f385ea94a.exe
Size

19KB
MD5

1b85954d53dcbb9df60f79d5c540728d
SHA1

07d1a9ef6aabf42c730729a99e3f910cb8526025
SHA256

ee30601c6cd2d8dc6bfe7fabaf94049406efc1bbe5892aa3af5e3e2f385ea94a
SHA512

448ef330cafc609a51ce1aca4464a52f3232320cbb26522db5420956e5403e7883d32af21ac20091f7782851a460d9449f85db76f3d39cfae0ed6c07b48f2769
SSDEEP

192:KV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Z/iLWF8qa1Dojjgi:kqaCF31cix+Dc4zjSTFF46gi

Score

10^/10

Family

cobaltstrike

http://58.87.96.158:666/cY7j

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\ee30601c6cd2d8dc6bfe7fabaf94049406efc1bbe5892aa3af5e3e2f385ea94a.exe
"C:\Users\Admin\AppData\Local\Temp\ee30601c6cd2d8dc6bfe7fabaf94049406efc1bbe5892aa3af5e3e2f385ea94a.exe"
1⤵
PID:1908

memory/1908-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1908-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download