cobaltstrike | 6e6245d6f122eba589f696944a299f6f1b6f17211f46acef4b8268d6ddb21b6e

Analysis

max time kernel
92s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11-06-2024 10:32

Target

6e6245d6f122eba589f696944a299f6f1b6f17211f46acef4b8268d6ddb21b6e.exe
Size

19KB
MD5

327fa044f2717d2e7a0d0e7950afadf7
SHA1

fd01e45a73a889a371165f6e940459c4309fa015
SHA256

6e6245d6f122eba589f696944a299f6f1b6f17211f46acef4b8268d6ddb21b6e
SHA512

86ea240fed5415e576cd6f1eb47d724a7e151636fdf9c4e9007712c4544504b0250e90945e9a02557e25aa0c661f7bf0bae589015337a732ead4604055afc15e
SSDEEP

192:bV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2u3dqwWF8qa1Dojjgi:1qaCF31cix+Dc4zjTqVFF46gi

Score

10^/10

Family

cobaltstrike

http://103.234.72.208:80/v3eO

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MDDRJS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\6e6245d6f122eba589f696944a299f6f1b6f17211f46acef4b8268d6ddb21b6e.exe
"C:\Users\Admin\AppData\Local\Temp\6e6245d6f122eba589f696944a299f6f1b6f17211f46acef4b8268d6ddb21b6e.exe"
1⤵
PID:2092

memory/2092-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2092-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download