cobaltstrike | c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2024 06:27

Target

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe
Size

19KB
MD5

2fa044ccad964926391f1d8aecd0f51e
SHA1

9e8e5f63040dad828ccd554d77ed33074961d955
SHA256

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
SHA512

b911878f80bfed7468399e14ffe667d64433fc24701141a8615e2b816c8a9141ae9609fe0d0a8c82de855529df7ea3557c444be9d3d4f85e28e0c745075fecd8
SSDEEP

192:ZV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2imxOcWF8qa1Dojjgi:7qaCF31cix+Dc4zjrZFF46gi

Score

10^/10

Family

cobaltstrike

http://154.40.44.197:80/Z9Vt

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe
"C:\Users\Admin\AppData\Local\Temp\c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea.exe"
1⤵
PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1028,i,12470628711992022444,7767535593390851522,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:8
1⤵
PID:740

memory/4028-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/4028-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download