cobaltstrike | 55f5ddc9c32c79dcebc947e2fbba313934523ef9a4c9709fa6bba45be398f935

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 15:36

Target
55f5ddc9c32c79dcebc947e2fbba313934523ef9a4c9709fa6bba45be398f935.exe
Size 24KB
Sample240613-s14wpayepp
SHA256 55f5ddc9c32c79dcebc947e2fbba313934523ef9a4c9709fa6bba45be398f935
MD5 a748344ba10b526ab0165a6f777e5e0d
SHA1 0a0556148ef407b3672cd3d8c4c85ed59e800b42
SHA512 d379b4c7d75c6bad3b0350afbe11289591ab0e3d047dd8788e27cabef0e0fdbc40d6dee353660da3285fb413cbf604aa4e1316a3ea63320ce1b7be0ea7e13095
SSDEEP 384:d9uAT/SrPWmRqbuYnJyUuhQKoyw/Fr8C3+2XK8wkNWwuBVYcTWIeW:d9nT/YWmRTiJSO5X1szLwuDYA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Attributes

user_agent
Host: www.ye0kr1n.top User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\55f5ddc9c32c79dcebc947e2fbba313934523ef9a4c9709fa6bba45be398f935.exe
"C:\Users\Admin\AppData\Local\Temp\55f5ddc9c32c79dcebc947e2fbba313934523ef9a4c9709fa6bba45be398f935.exe"
1⤵
PID:4176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1408 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8
1⤵
PID:2944

memory/4176-0-0x0000000000900000-0x0000000000901000-memory.dmp

Download

memory/4176-1-0x00000000038D0000-0x0000000003CD0000-memory.dmp

Download

memory/4176-2-0x0000000000400000-0x0000000000410000-memory.dmp

Download