cobaltstrike | f0adb348f2302b44885daeeae792e8e2b1df63e51e44c7632bffe125a894f553 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
16-09-2024 18:38

Sharing

Report Analysis Logs

General

Target

f0adb348f2302b44885daeeae792e8e2b1df63e51e44c7632bffe125a894f553.dll
Size

270KB
MD5

32e250c2321308ccaac459412b77b342
SHA1

a44b07fe7c6c546a6cabda82a55ea322feb458c2
SHA256

f0adb348f2302b44885daeeae792e8e2b1df63e51e44c7632bffe125a894f553
SHA512

3a2422f480a4e547cccd2dd51f967f53fa81252d8bf8c2d22ee9ef39c00cf0d4810ad59fc41fe6f13eed067d700ac092a46e61f217dbe07ff360c4af3d61da0c
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7z0GIkfhUYJF6vzHkJ:rzbUWootfDCvT4ZTXzCLfIk5UDSrKM

Score

10^/10

cobaltstrike 0 backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f0adb348f2302b44885daeeae792e8e2b1df63e51e44c7632bffe125a894f553.dll,#1
1⤵
PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2728-0-0x0000000001F40000-0x0000000001F92000-memory.dmp

Filesize
328KB

Download