cobaltstrike | eb14dd5fca96049fa1db4760470181a5453b479eae5695d4ca7ca9adfdbfa5fb

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 11:53

Target
eb14dd5fca96049fa1db4760470181a5453b479eae5695d4ca7ca9adfdbfa5fb.dll
Size 270KB
Sample240719-n2pe6sshkg
SHA256 eb14dd5fca96049fa1db4760470181a5453b479eae5695d4ca7ca9adfdbfa5fb
MD5 717608df8b0fd3084cdb754deac6d747
SHA1 a21d5d9a36339eada6553f67a18f7e15858a635f
SHA512 14bcddc9c9d807ccfaae8ab684a7debcdef12149909e72df1a6bc8dc4985ee356bb640f6ba441e321889fe782bce3dda3723e6389222fc69924a3a173b823fcc
SSDEEP 3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zjGIkfhUYJF6vzHkt:rzbUWootfDCvT4ZTXzCL6Ik5UDGrKM
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

Attributes

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb14dd5fca96049fa1db4760470181a5453b479eae5695d4ca7ca9adfdbfa5fb.dll,#1
1⤵
PID:3292