cobaltstrike | 25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27-09-2024 06:04

Target

25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe
Size

23KB
MD5

439250a1b24166a010c7658a24bf800e
SHA1

c86f61d42baa3241edfb4170c8af697eaa3bc87e
SHA256

25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
SHA512

34d776abe70c39090c8be3555a57135f2d5c634de1ac22152053a7c92c1d2e987925c2c30680c2d82ab231d15d8f3dd0631511183b820a855a09b9c53c2e3eb4
SSDEEP

384:SJmann0my70gXc5UgOHiPX236BYtzLOZK+c+o/4/cKpFFZid77FFAsy:SQa0f7EU7m24GzLXBw0KpnZypy

Score

10^/10

Family

cobaltstrike

http://206.166.251.28:80/k2Pp

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe
"C:\Users\Admin\AppData\Local\Temp\25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe"
1⤵
PID:1972

memory/1972-0-0x000007FEF58D3000-0x000007FEF58D4000-memory.dmp

Filesize
4KB

Download
memory/1972-1-0x0000000001180000-0x000000000118C000-memory.dmp

Filesize
48KB

Download