cobaltstrike | 48c956a8b4f03e43620448c6708a6405523dede6868ee868e80ee5278e4c5bac | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 10:25

Sharing

Report Analysis Logs

General

Target

48c956a8b4f03e43620448c6708a6405523dede6868ee868e80ee5278e4c5bac.dll
Size

270KB
MD5

0e3ba5963abb62a91536ca8bcbaf5cbd
SHA1

fa938cdd757b8014dc2d22433f27a51c6b7c20fa
SHA256

48c956a8b4f03e43620448c6708a6405523dede6868ee868e80ee5278e4c5bac
SHA512

72d76c69c4bf9ca3bb67108ade434e3cc83c5ae37a6042414d4e9b035dd3a9d2190e26da97239d7ea89d9cde4cdb53c48da31b71a8fc8c54d6e03c77d4f2973d
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zhGIkfhUYJF6vzHk8:rzbUWootfDCvT4ZTXzCLMIk5UDXrKM

Score

10^/10

cobaltstrike 0 backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\48c956a8b4f03e43620448c6708a6405523dede6868ee868e80ee5278e4c5bac.dll,#1
1⤵
PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2500-0-0x0000000000100000-0x0000000000152000-memory.dmp

Filesize
328KB

Download