73ab3abfacf35f7176287a94048811cc64e4313888924aa0f9beae7d94516525

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:21

Target

2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe
Size

379KB
MD5

b48927922ed2b268c2aff88bf1c87d90
SHA1

dc91c71dab8e9dd505f5705a963a52ed7b83fa79
SHA256

73ab3abfacf35f7176287a94048811cc64e4313888924aa0f9beae7d94516525
SHA512

7c037fc68d488ba66acc54e987ad1f93acd47851221a630655027eddcefd5500a311988edfe7927a9803c72731eb084f19bc604131d408c6d0492aa82cc085cd
SSDEEP

6144:4uU9lT4Z9+e8DWV/h9HW9p+KW4Oz2w1ASkH1ENDiOiBQx7:4uwf/WFh9HS0KW1z2w1ApH1ENliBQ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe

pid	process
1816	2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe
1816	2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_b48927922ed2b268c2aff88bf1c87d90_cobalt-strike_cobaltstrike.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1816