cobaltstrike | b807498de818218975fe8836a4ba511c994e8bd37427a19b93dea3d8b643548a

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/06/2024, 18:27

Target
b807498de818218975fe8836a4ba511c994e8bd37427a19b93dea3d8b643548a.exe
Size 66KB
Sample240618-w3xf6stfph
SHA256 b807498de818218975fe8836a4ba511c994e8bd37427a19b93dea3d8b643548a
MD5 47bb8d7f3cf9b28d425fd1185a4f9704
SHA1 1120bafa9b6fbd354d9608429abadb182bee5a28
SHA512 b392fc48159df2a91c86d32f4757283ca084dbf5636c27aa2459cbc38249746026a08b63829782e02dcdebd762b185159c4d6c010bcf2911dbc015618065f298
SSDEEP 1536:MywDbEMczeacyqGRfkRXFaYG7DOAT7r0MbAYYtJB:5sRkYG7P5btYx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\b807498de818218975fe8836a4ba511c994e8bd37427a19b93dea3d8b643548a.exe
"C:\Users\Admin\AppData\Local\Temp\b807498de818218975fe8836a4ba511c994e8bd37427a19b93dea3d8b643548a.exe"
1⤵
PID:4728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1408 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8
1⤵
PID:3768

memory/4728-0-0x0000017E2FA00000-0x0000017E2FA01000-memory.dmp

Download

memory/4728-2-0x00007FF78C870000-0x00007FF78C89A000-memory.dmp

Download