cobaltstrike | 76280a5e65e24a579d0184033c4b25bd0edae3eaa7301c324fd5cb6186d85d4d

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/06/2024, 09:22

Target
76280a5e65e24a579d0184033c4b25bd0edae3eaa7301c324fd5cb6186d85d4d.exe
Size 964KB
Sample240629-lcavdaxflj
SHA256 76280a5e65e24a579d0184033c4b25bd0edae3eaa7301c324fd5cb6186d85d4d
MD5 fc93beb7c77ee12180f8b0ce99f7e0c7
SHA1 5d6f80a010574ebb4566568f4674a25ea36cecc3
SHA512 c0c82ff089042f0468d578766eed7d70965b399447eb6da7f1a0a74eef02fa85b182ce310b1993ddf5d3fca34e2de8b096219f52da959f3f3fc8ad2692c06a59
SSDEEP 12288:I7IumF2iRf9YOoTjmCS+LnYxMNi/4+HVLp3ESVofxjNGd52O:IsuLAvov3LZqRkNTO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\76280a5e65e24a579d0184033c4b25bd0edae3eaa7301c324fd5cb6186d85d4d.exe
"C:\Users\Admin\AppData\Local\Temp\76280a5e65e24a579d0184033c4b25bd0edae3eaa7301c324fd5cb6186d85d4d.exe"
1⤵
PID:3844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3932 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
1⤵
PID:4560