cobaltstrike | e2e1d6c2a6c3760a8a0761567ff06b0d6107e5e90a6f15c30fb915ae9157c3cf

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15-06-2024 16:14

Target

e2e1d6c2a6c3760a8a0761567ff06b0d6107e5e90a6f15c30fb915ae9157c3cf.exe
Size

2.0MB
MD5

48f69096aca2a8631e5c2ff6918160ed
SHA1

23b68b8c36313e02123710ab8c1d14e49d77759b
SHA256

e2e1d6c2a6c3760a8a0761567ff06b0d6107e5e90a6f15c30fb915ae9157c3cf
SHA512

98f1c809653956b2c0e33990fee13a7aabfc1367eb320ba9b4a3669c8812edcb33123fdba8d185aa314d9068b4f0119a5774de789805506eeebfc0dbe700a486
SSDEEP

24576:VpFD8+9xWxSyATtIajREQC+J6pSdeX4nZEj7dvyUHEJFF5+MhwBAAdTIKDHIf23q:BD8AxWwy4m+7rM0u7fHELn7haIKDHvq

Score

10^/10

Family

cobaltstrike

http://192.168.2.116:80/Une5

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\e2e1d6c2a6c3760a8a0761567ff06b0d6107e5e90a6f15c30fb915ae9157c3cf.exe
"C:\Users\Admin\AppData\Local\Temp\e2e1d6c2a6c3760a8a0761567ff06b0d6107e5e90a6f15c30fb915ae9157c3cf.exe"
1⤵
PID:3812

memory/3812-0-0x000001FB4C3A0000-0x000001FB4C3A1000-memory.dmp

Filesize
4KB

Download
memory/3812-1-0x000001FB4C3A0000-0x000001FB4C3A1000-memory.dmp

Filesize
4KB

Download