cobaltstrike | b05473c841391ccb2032655a864088e714df2c2e01c837939ad16a6d23c3c387

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 07:33

Target
b05473c841391ccb2032655a864088e714df2c2e01c837939ad16a6d23c3c387.exe
Size 1.1MB
Sample240225-jdl8pafe81
SHA256 b05473c841391ccb2032655a864088e714df2c2e01c837939ad16a6d23c3c387
MD5 174024b899474ad2c46d64a50df4f6be
SHA1 deffa7948a97a1f3e4ae6e8024e445968668d17f
SHA512 ff46ec74107cbda7b5178f7542ac2fd315e06b67df679d0698e98f3b0c7ba220a00b77a5edcb0ba330e7c3f43a854a00cdbf9cdce778cecd8a7862e98fababcc
SSDEEP 12288:I27q8BViDLj2nIccHu+Tc/gvpQW7GzBI2Xf/7Vh:IHl/2ngBc8p3uF3Jh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Attributes

user_agent
Host: update.office-oa.org User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\b05473c841391ccb2032655a864088e714df2c2e01c837939ad16a6d23c3c387.exe
"C:\Users\Admin\AppData\Local\Temp\b05473c841391ccb2032655a864088e714df2c2e01c837939ad16a6d23c3c387.exe"
1⤵
PID:3484