cobaltstrike | 344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
26-04-2024 10:14

Target

344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063.exe
Size

19KB
MD5

3e83ad7d87ed23e78f8ae1caf72995e4
SHA1

eed9f54422acdceedc91b7debe0c4666752be881
SHA256

344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063
SHA512

8b9e8a52534a88389b227cbaf6d01ac5071cfb7cee5385d9cea3776ec14cfd90713e8b12d64a0ef818ba6359e1cd17985f6a9117e3f2daa76b9fd547d7792c84
SSDEEP

192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2H5zyUQWbWF8qa1Dojjgi:uqaCF31cix+Dc4zjKPQWiFF46gi

Score

10^/10

Family

cobaltstrike

http://192.168.50.124:80/uG7j

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063.exe
"C:\Users\Admin\AppData\Local\Temp\344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063.exe"
1⤵
PID:3988

memory/3988-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/3988-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download