cobaltstrike | 835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14-09-2024 14:12

Target

835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448.exe
Size

578KB
MD5

9f72e5bef527a4547581b04a6f75ee02
SHA1

011e2cb44654c974e250b416aea35218bb506a0f
SHA256

835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448
SHA512

2535b4f1629db15ab47af4ebc640699dde5f32b89e9b010adddf2dbdde6e32ddf058d0caefb8911b1105140263ecdac760193ee82975ea120690c3476abd6d1e
SSDEEP

12288:zarMyqsDbt/OLH0Zywk3Ta77Hp0fWAUmBmmNtlFvYFLCqoJO:zXqDbt30hFvYFLCqoJO

Score

10^/10

Family

cobaltstrike

http://10.110.102.24:5555/Iht8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448.exe
"C:\Users\Admin\AppData\Local\Temp\835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448.exe"
1⤵
PID:4548

memory/4548-0-0x000001871C8F0000-0x000001871C8F1000-memory.dmp

Filesize
4KB

Download
memory/4548-1-0x00007FF708350000-0x00007FF7083DB000-memory.dmp

Filesize
556KB

Download
memory/4548-13-0x00007FF708350000-0x00007FF7083DB000-memory.dmp

Filesize
556KB

Download