cobaltstrike | a4ce8d5172723881f8e56d26fceae50bd4571ae987306b2ba1de6166de3430e7

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19-05-2024 14:23

Target

a4ce8d5172723881f8e56d26fceae50bd4571ae987306b2ba1de6166de3430e7.exe
Size

1.3MB
MD5

c8ff50b04714eb82e2f39e0dd0aeb10e
SHA1

53eb99b04ce51ea80dac7572072d52635fbffb78
SHA256

a4ce8d5172723881f8e56d26fceae50bd4571ae987306b2ba1de6166de3430e7
SHA512

e8efd1035cd9ff2d99ff594b3e1aebc569c2980bc393a921774fa65c314e3b4703ec1828b13082bdf3f0b5b8b958ef2007bced7e0e2614d2b3c28d11bf57f17e
SSDEEP

24576:6AkUe6X2dx1DYK8u3Y2VlndCZJfVOV0tmZ:Lktq2pkC

Score

10^/10

Family

cobaltstrike

http://192.168.213.128:443/nn6K

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; InfoPath.2)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\a4ce8d5172723881f8e56d26fceae50bd4571ae987306b2ba1de6166de3430e7.exe
"C:\Users\Admin\AppData\Local\Temp\a4ce8d5172723881f8e56d26fceae50bd4571ae987306b2ba1de6166de3430e7.exe"
1⤵
PID:1836

memory/1836-0-0x000001C979340000-0x000001C979341000-memory.dmp

Filesize
4KB

Download