cobaltstrike | 24c4459965fbbe4fd644e24c2a58a1a97613a7eac25c40e778249700fc48307e

Analysis

max time kernel
144s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 13:34

Target
f8d67a21e4ca276367cb9b311e7d717bf7ea487970c9c5a12d56a0fe3846081d.dll
Size 272KB
Sample240725-qvblvathmg
SHA256 f8d67a21e4ca276367cb9b311e7d717bf7ea487970c9c5a12d56a0fe3846081d
MD5 5bb52025289ba5357199bbe87732ad10
SHA1 f10ce6223b8ef1f25370d05ce98b19308d11aae7
SHA512 3734a70665dba699c74f41f4f951aae9dc665dcae58e2e58f50025d13fd07445f4ae782f135a2c200481e2f8d73461490697a29bd58aaef83b09d07d56d880f1
SSDEEP 3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zHGIkfhUYJF6vzHkV:rzbUWootfDCvT4ZTXzCLuIk5UDerKM
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

Attributes

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f8d67a21e4ca276367cb9b311e7d717bf7ea487970c9c5a12d56a0fe3846081d.dll,#1
1⤵
PID:928