cobaltstrike | d55a45f8ad983d13ff106d28615da9db28a7279beeb7b4b86aa37357e3c5fa34 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-09-2024 10:41

Sharing

Report Analysis Logs

General

Target

d55a45f8ad983d13ff106d28615da9db28a7279beeb7b4b86aa37357e3c5fa34.dll
Size

270KB
MD5

dc57aff41cc75328670c635c7691cb0c
SHA1

436c0049f1974f2214c32cbfba3bc0c281f13bbe
SHA256

d55a45f8ad983d13ff106d28615da9db28a7279beeb7b4b86aa37357e3c5fa34
SHA512

fc26bc064394b7788a5e898eb2e0d9c868314af680ec52f56cb399a041d7b8a3c4b65124c0140229275d12021edf402b0edda529dd120c2679908dfb29bbc00d
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zhGIkfhUYJF6vzHk3:rzbUWootfDCvT4ZTXzCLcIk5UDMrKM

Score

10^/10

cobaltstrike 0 backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d55a45f8ad983d13ff106d28615da9db28a7279beeb7b4b86aa37357e3c5fa34.dll,#1
1⤵
PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2688-0-0x0000000000460000-0x00000000004B2000-memory.dmp

Filesize
328KB

Download