cobaltstrike | 7cf6cd33fc95ca9b31c7077f9d04c0f54dbd56c5cc18e85082e46d3fb711a33d

Analysis

max time kernel
140s
max time network
131s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 10:20

Target

7cf6cd33fc95ca9b31c7077f9d04c0f54dbd56c5cc18e85082e46d3fb711a33d.exe
Size

19KB
MD5

e159b7e30f8b5d0ab468be0c24734d3b
SHA1

ef1ec3b54cee28c0e84b48623bec69b36660ab4a
SHA256

7cf6cd33fc95ca9b31c7077f9d04c0f54dbd56c5cc18e85082e46d3fb711a33d
SHA512

e44aa64671a42739c9d86db6b2232b786af99b1668c0f1a408103c2711e00a9e9cf0f2f00abea07c39f556c2ca6985b12e44c4b186bfcb1bfffc3e06a51adbd0
SSDEEP

192:6V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2g+TcmWF8qa1Dojjgi:UqaCF31cix+Dc4zjJ+TcXFF46gi

Score

10^/10

Family

cobaltstrike

http://156.251.172.80:443/jquery-3.3.2.slim.min.js

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Host: www.vip8806.mom Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\7cf6cd33fc95ca9b31c7077f9d04c0f54dbd56c5cc18e85082e46d3fb711a33d.exe
"C:\Users\Admin\AppData\Local\Temp\7cf6cd33fc95ca9b31c7077f9d04c0f54dbd56c5cc18e85082e46d3fb711a33d.exe"
1⤵
PID:1512

memory/1512-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1512-19-0x00000000043C0000-0x000000000466D000-memory.dmp

Filesize
2.7MB

Download
memory/1512-18-0x00000000047C0000-0x0000000004C32000-memory.dmp

Filesize
4.4MB

Download
memory/1512-20-0x0000000002F30000-0x0000000002F32000-memory.dmp

Filesize
8KB

Download
memory/1512-21-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download