cobaltstrike | a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 08:04

Target

a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074.exe
Size

19KB
MD5

1cf958721f26350d0536b340cae7507f
SHA1

6154d37e9b59d425e5c4f27501b14320e357086d
SHA256

a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074
SHA512

925364fc98a8c0cf9b8e04e23606e91b62cdc3caa425269e73411e6b8fcae1f309fad5be7490123a15d3df3443031671a2bf61e0d0f4257fbca7b0db435dbea7
SSDEEP

192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Lyxn/WF8qa1Dojjgi:RqaCF31cix+Dc4zjJ+FF46gi

Score

10^/10

Family

cobaltstrike

http://192.168.64.130:80/kn7M

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074.exe
"C:\Users\Admin\AppData\Local\Temp\a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074.exe"
1⤵
PID:3976

memory/3976-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/3976-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download