cobaltstrike | f9115c06ac9c759c45683b20dee82213b6d91bedba6c8837669657bec8a68f99

Analysis

max time kernel
142s
max time network
146s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 03:01

Target

f9115c06ac9c759c45683b20dee82213b6d91bedba6c8837669657bec8a68f99.exe
Size

472KB
MD5

89164678e9fdc54d2162d334b4f0a4f2
SHA1

25deffcd001ae76f7c6c64a9d4d04817bb6e5596
SHA256

f9115c06ac9c759c45683b20dee82213b6d91bedba6c8837669657bec8a68f99
SHA512

3bd3880954f7b5a1da8491d7c3c2984419cc9eadc70d53ff94c7377c4b5a9b23120e99428adf0b7be528a0f955359c5dcf60077bbb3e873f8a8c80313936a175
SSDEEP

6144:D0iym7neoYmdrzOEBXpl1R96us2S73fjZh4kmeCt1ZpV32sl7kB0EL:DD7neoX6qXpl1S2434kmHZpV3b7kBD

Score

10^/10

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\f9115c06ac9c759c45683b20dee82213b6d91bedba6c8837669657bec8a68f99.exe
"C:\Users\Admin\AppData\Local\Temp\f9115c06ac9c759c45683b20dee82213b6d91bedba6c8837669657bec8a68f99.exe"
1⤵
PID:1444

memory/1444-2-0x0000000000610000-0x0000000000690000-memory.dmp

Filesize
512KB

Download
memory/1444-1-0x0000000000610000-0x0000000000690000-memory.dmp

Filesize
512KB

Download
memory/1444-0-0x0000000000C90000-0x0000000001102000-memory.dmp

Filesize
4.4MB

Download
memory/1444-3-0x000000013FC60000-0x000000013FCDD000-memory.dmp

Filesize
500KB

Download
memory/1444-5-0x0000000000610000-0x0000000000690000-memory.dmp

Filesize
512KB

Download