cobaltstrike | 4bbe41cb38bcc75cd8f14bedb0ac4d956b0b0533793614157757d39e001bf019

Analysis

max time kernel
140s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 22:06

Target
2944-0-0x00000000002C0000-0x0000000000304000-memory.dll
Size 272KB
Sample240724-11cffazdql
SHA256 4bbe41cb38bcc75cd8f14bedb0ac4d956b0b0533793614157757d39e001bf019
MD5 8385c3dc6aef29dfcdf36fffa98af8a4
SHA1 94414cf930b157ee045ae3cd71537e54ace01822
SHA512 86b67f579a932d5a7c95b9a0c1e93886177e09a20fb28588ae147f043ccca72f17b9d8e7af5b47c7b9de0fde75f9f24113a3353aadadba8334090a6052f678a5
SSDEEP 3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zgGIkfhUYJF6vzHkM:rzbUWootfDCvT4ZTXzCLrIk5UDLrKM
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

Attributes

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2944-0-0x00000000002C0000-0x0000000000304000-memory.dll,#1
1⤵
PID:624