cobaltstrike | 54c66886b892d3e8b070ee240513c696002aa081be5d7e4deb5668e0f6f050d2

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 10:29

Target

54c66886b892d3e8b070ee240513c696002aa081be5d7e4deb5668e0f6f050d2.exe
Size

19KB
MD5

708e1a99bf427bd900663219f130e1a2
SHA1

19a4ee5c62307cf5f52fa749e742ca2b11c53d07
SHA256

54c66886b892d3e8b070ee240513c696002aa081be5d7e4deb5668e0f6f050d2
SHA512

eb8c3dcd4b66ffceb07910a3c37df375ad25df4a0df66a7e8abc205bfb26e1a2a4607311e28c7b6bbf249541e74ecee1770cd8611f51055aa5dcf6c19de306bb
SSDEEP

192:+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2hYJ38WF8qa1Dojjgi:IqaCF31cix+Dc4zjWYbFF46gi

Score

10^/10

Family

cobaltstrike

http://47.113.148.26:80/1ZXz

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\54c66886b892d3e8b070ee240513c696002aa081be5d7e4deb5668e0f6f050d2.exe
"C:\Users\Admin\AppData\Local\Temp\54c66886b892d3e8b070ee240513c696002aa081be5d7e4deb5668e0f6f050d2.exe"
1⤵
PID:1684

memory/1684-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1684-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download