Extracted

• • Target

    16775923469199d1f02fbfd4d6b4b8cd449ebc8045e7138c73615a0f3e4e7b5f

  • Size

    1.3MB

  • MD5

    794053d4786123a47f884af5e13c5f9a

  • SHA1

    1a05cbe8c778de9731f1b8ee78bbc17417d3a083

  • SHA256

    16775923469199d1f02fbfd4d6b4b8cd449ebc8045e7138c73615a0f3e4e7b5f

  • SHA512

    84ee11df4ac9ff055fd65daaa61010ba3e593444ae20347da34cbd048d9ceaef9b9b342e7a724f0a200136febdacd7e76d6e1210489dd6b1643f14af98c598c6

  • SSDEEP

    24576:ggnEbBRn3hIZZlUmihksgi4jyKdg/e8mCPqjBWTGmv0oSRlRwFyt5aVWxlU:HCRRceRhkRi4jdW2PgTGM0oiwW5TbU

  Score

  10^/10

  cobaltstrikebackdoortrojan

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2