cobaltstrike | 73bbe2dd491c9e5dbcf154311e7cc9b12d4164744fee5e1ce920747b77c5e1b1

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15-04-2024 15:07

Target

73bbe2dd491c9e5dbcf154311e7cc9b12d4164744fee5e1ce920747b77c5e1b1.exe
Size

19KB
MD5

5fcbe88f220334f812a20e21a9350d1f
SHA1

fc3a5774a47553b4d7d2082d4865a87b8abc883f
SHA256

73bbe2dd491c9e5dbcf154311e7cc9b12d4164744fee5e1ce920747b77c5e1b1
SHA512

e7ed7e732c9d048a5de03357b64246870563e071cf74b5291a3337091eb0b7291036df1fcee9eb410a6a9ca8cb23fffe3a8826ba293e53c98fcde9df1437ca06
SSDEEP

192:LV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2+MGxuMxeWF8qa1Dojjgi:lqaCF31cix+Dc4zjoqfFF46gi

Score

10^/10

Family

cobaltstrike

http://192.168.86.147:80/SPGs

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\73bbe2dd491c9e5dbcf154311e7cc9b12d4164744fee5e1ce920747b77c5e1b1.exe
"C:\Users\Admin\AppData\Local\Temp\73bbe2dd491c9e5dbcf154311e7cc9b12d4164744fee5e1ce920747b77c5e1b1.exe"
1⤵
PID:896

memory/896-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/896-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download