cobaltstrike | 749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952

Analysis

max time kernel
149s
max time network
154s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 13:14

Target

749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952.exe
Size

19KB
MD5

2f9b50a66bf1c19cf9ee45045aa17890
SHA1

bde14518c24dc93eab4d3c0b0aa7a4d1e6f59d74
SHA256

749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952
SHA512

0995a61a5bb8e918b281b584e0d2189fc4159ce59a97b1a8dbdc05f1f57c98fd1648f433c2ec0b07073f7c5085db1a4c07b9432f202a68b531b7456f33473bb0
SSDEEP

192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tBlFjYBWF8qa1Dojjgi:3qaCF31cix+Dc4zjSl5dFF46gi

Score

10^/10

Family

cobaltstrike

http://192.168.174.135:4444/puE3

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0; msn OptimizedIE8;ENUS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952.exe
"C:\Users\Admin\AppData\Local\Temp\749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952.exe"
1⤵
PID:1664

memory/1664-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1664-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download