cobaltstrike | 64d9f6bb3289edb7d2f07f476a53e5d3b418cd184a57e56a46ea3f498fc3fdb4 | Triage

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
17/11/2024, 03:01

Sharing

Report Analysis Logs

General

Target

64d9f6bb3289edb7d2f07f476a53e5d3b418cd184a57e56a46ea3f498fc3fdb4.dll
Size

270KB
MD5

e27128a0ab214659a10b6c61ef688fc0
SHA1

3e5c484404da60c5728d229b37d095b22bfc5f52
SHA256

64d9f6bb3289edb7d2f07f476a53e5d3b418cd184a57e56a46ea3f498fc3fdb4
SHA512

634be7099ae4a219be6786d45ad9ba0b43bff277cb411f4a6054c55f3bd4da078d94860dd10c06595b243b24ab2b56c22299642e5ac35c758e5e1c1de7c9f873
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7z5GIkfhUYJF6vzHk1:rzbUWootfDCvT4ZTXzCL0Ik5UDOrKM

Score

10^/10

cobaltstrike 0 backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike
Cobaltstrike family
cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\64d9f6bb3289edb7d2f07f476a53e5d3b418cd184a57e56a46ea3f498fc3fdb4.dll,#1
1⤵
PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2304-0-0x0000000001B90000-0x0000000001BE2000-memory.dmp

Filesize
328KB

Download