cobaltstrike | f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381

Analysis

max time kernel
149s
max time network
154s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27-09-2024 07:20

Target

f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381.exe
Size

41KB
MD5

1888adc6c85a5087f9b3b782fffd266d
SHA1

3e111bbbf377193c031a1d58515acdb9d85e2d5e
SHA256

f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381
SHA512

235f4907626a7d2b25a44a87690cac96729efe587ae57615e6dc67142d0cd8759e8755a60d0779f3b653f36af3f733fd94f0a6488a0c09f025719e6321b522ca
SSDEEP

768:dBOZpWVJUNNua3RsFTcuvwpw49G7DetPG3R0aLHFJQUdW:uQJUjua3y9wS49G7SXa3QUd

Score

10^/10

Family

cobaltstrike

http://101.200.223.34:443/WYPI

Attributes

user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/26.0

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381.exe
"C:\Users\Admin\AppData\Local\Temp\f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381.exe"
1⤵
PID:1348

memory/1348-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1348-1-0x000000013FEE0000-0x000000013FEF1000-memory.dmp

Filesize
68KB

Download