73ab3abfacf35f7176287a94048811cc64e4313888924aa0f9beae7d94516525

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 02:21

Target

2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe
Size

379KB
MD5

b48927922ed2b268c2aff88bf1c87d90
SHA1

dc91c71dab8e9dd505f5705a963a52ed7b83fa79
SHA256

73ab3abfacf35f7176287a94048811cc64e4313888924aa0f9beae7d94516525
SHA512

7c037fc68d488ba66acc54e987ad1f93acd47851221a630655027eddcefd5500a311988edfe7927a9803c72731eb084f19bc604131d408c6d0492aa82cc085cd
SSDEEP

6144:4uU9lT4Z9+e8DWV/h9HW9p+KW4Oz2w1ASkH1ENDiOiBQx7:4uwf/WFh9HS0KW1z2w1ApH1ENliBQ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe

pid process

2244 2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe

pid	process
2244	2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2244