cobaltstrike | 4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2024 17:16

Target

4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c.exe
Size

4.0MB
MD5

993c9c40bb73eb1808c482c9603dd58a
SHA1

53642dc2d17fceec67be0e62fadab63ca6c53c92
SHA256

4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c
SHA512

1816f26a52353c2c76fdf2237ad10d441f3b862606e0b09273b8bca9be814bd52438d8c4da604662bec117eb1967393870b9fb279d73b6cb404552c1d1731377
SSDEEP

49152:G1hHDJgIQHa9KGXsvyIj05EUklj68OLgghX409o/0dNAfh1LKgdrDFnrvQA:SOnysvIElRb9Z09o/8Mh5KgdfFr

Score

10^/10

Family

cobaltstrike

http://192.168.111.128:7777/JyYA

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c.exe
"C:\Users\Admin\AppData\Local\Temp\4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c.exe"
1⤵
PID:1548

memory/1548-0-0x000001E07FAF0000-0x000001E07FAF1000-memory.dmp

Filesize
4KB

Download