cobaltstrike | b386365632296b71efa94ec41c911eff3b7845da2d51a1894dabb868216ce037

Analysis

max time kernel
147s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/08/2024, 07:38

Target
77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb.dll
Size 272KB
Sample240830-jgr84sthpr
SHA256 77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb
MD5 e748442b6e7b442f6c39636e12761c47
SHA1 5c1e93c7aeb140576de53f1808ec497fee1f4388
SHA512 32da3a72944734ee21ff139863ba7e12856e589e4f92b9ea9718c87e3adaa2847d4127a610f3bde63edeb08b27b3ea6e6852c5b5c8bb06f452f121785a771a81
SSDEEP 3072:daAWsgiAqyTI0wCULfg8jih+eJwQxIqBTrC9McPEoplOfVPYJIh7F8RiUf:daF2LooiweKwTyP8opoNPrfU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

Attributes

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\77e421942b33d8dd4a79b14cb1723cc05840f491f61d2e429a966fef43a0d0fb.dll,#1
1⤵
PID:4708

memory/4708-0-0x000001EB17020000-0x000001EB17072000-memory.dmp

Download