cobaltstrike | c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea

Analysis

max time kernel
148s
max time network
149s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
18-09-2024 06:27

Target

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe
Size

19KB
MD5

2fa044ccad964926391f1d8aecd0f51e
SHA1

9e8e5f63040dad828ccd554d77ed33074961d955
SHA256

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
SHA512

b911878f80bfed7468399e14ffe667d64433fc24701141a8615e2b816c8a9141ae9609fe0d0a8c82de855529df7ea3557c444be9d3d4f85e28e0c745075fecd8
SSDEEP

192:ZV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2imxOcWF8qa1Dojjgi:7qaCF31cix+Dc4zjrZFF46gi

Score

10^/10

Family

cobaltstrike

http://154.40.44.197:80/Z9Vt

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe
"C:\Users\Admin\AppData\Local\Temp\c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe"
1⤵
PID:2596

memory/2596-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2596-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download