cobaltstrike | ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/09/2024, 07:26

Target

ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79.exe
Size

19KB
MD5

aa92691b3e17ac723712a6ffe7aab057
SHA1

71f2e159a98c2c7d1714aea559cb483169d3495d
SHA256

ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79
SHA512

9991b1be1097964891f0d9cfb3ae525723552bb59a4211446cf12ea22fe5bed8d8a3179678b98916474e7fe75d03d7d7ad4a35f04071e74079553b3b55e38ff2
SSDEEP

192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ps1HAxWF8qa1Dojjgi:CqaCF31cix+Dc4zjysaMFF46gi

Score

10^/10

Family

cobaltstrike

http://111.229.204.49:1234/6dtO

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79.exe
"C:\Users\Admin\AppData\Local\Temp\ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79.exe"
1⤵
PID:1796

memory/1796-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1796-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download