cobaltstrike | 03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-09-2024 10:39

Target

03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122.exe
Size

19KB
MD5

d4c16548b779a475ba52997ba1cf96f2
SHA1

b41f89c0427ab5e9b5f13a43920ecbd043ac3bab
SHA256

03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122
SHA512

1cc9a9ad5864d2e328ae26d5b1e96c802220040f24ef65ea2681b6d95d80672b026c0a0e095da35eb8f79b6ef107f117a32325ce32aac2bce1bfe89772519c57
SSDEEP

192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2l3fRWF8qa1Dojjgi:qqaCF31cix+Dc4zj430FF46gi

Score

10^/10

Family

cobaltstrike

http://127.0.0.1:60020/ASah

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122.exe
"C:\Users\Admin\AppData\Local\Temp\03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122.exe"
1⤵
PID:292

memory/292-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/292-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download