cobaltstrike | afa17492dcf0c292ead26f1465d29af56822da6e15365360c0d929f4fc893c68 | Triage

Analysis

max time kernel
150s
max time network
141s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
29/10/2023, 16:29

Sharing

Report Analysis Logs

General

Target

afa17492dcf0c292ead26f1465d29af56822da6e15365360c0d929f4fc893c68.exe
Size

49KB
MD5

2ce78ece04030ec1c3379d9787ca72a6
SHA1

7190d345f15be65c841ab760acbf917c0b03ac86
SHA256

afa17492dcf0c292ead26f1465d29af56822da6e15365360c0d929f4fc893c68
SHA512

91e04a97c0cfe3165ce86f0314472858936064844bdc3b97a1fc2e160ac6686dc5caea32fb469f1faa27d229e7a39e78703aa74108483fe6f9e3c6a73a2904d9
SSDEEP

768:Gm/3BO52fwX54h6FWtjPt9/Um5GYY9Jmg4IfAPUtlbH:GspfwXSIFSlqJ9f4IoPmbH

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.160.135:80/IYUf

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\afa17492dcf0c292ead26f1465d29af56822da6e15365360c0d929f4fc893c68.exe
"C:\Users\Admin\AppData\Local\Temp\afa17492dcf0c292ead26f1465d29af56822da6e15365360c0d929f4fc893c68.exe"
1⤵
PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2632-0-0x0000000000850000-0x0000000000866000-memory.dmp

Filesize
88KB

Download
memory/2632-1-0x000007FEF5A50000-0x000007FEF643C000-memory.dmp

Filesize
9.9MB

Download
memory/2632-2-0x0000000000250000-0x0000000000256000-memory.dmp

Filesize
24KB

Download
memory/2632-3-0x0000000000260000-0x0000000000261000-memory.dmp

Filesize
4KB

Download
memory/2632-4-0x000000001AFF0000-0x000000001B070000-memory.dmp

Filesize
512KB

Download
memory/2632-5-0x000007FEF5A50000-0x000007FEF643C000-memory.dmp

Filesize
9.9MB

Download
memory/2632-6-0x000000001AFF0000-0x000000001B070000-memory.dmp

Filesize
512KB

Download