Overview

overview

10

Static

static

3

6488c16568...f2.exe

windows7-x64

1

6488c16568...f2.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-11-2024 07:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6488c16568c451a8c4e6dbc54e80033edba5832eecd771bbcdf3eff9b39c77f2.exe

  • Size

    587KB

  • MD5

    da3940f7dfcaa1f4717c9de5cfb70ad1

  • SHA1

    afdb724a0537901320b6dd4effa3bc9e1e0ef606

  • SHA256

    6488c16568c451a8c4e6dbc54e80033edba5832eecd771bbcdf3eff9b39c77f2

  • SHA512

    32c480d709c1f2f76543c59e23cc47a53719c53adf83a87c1ebeda73cf9e926b6ca83469f1c6940e7b995be0273ac99fb95f4eb2008ae66d2f0a11fd4c4fa5e0

  • SSDEEP

    12288:G9amWAKJACcvhYKlhSx2+8NlNF/3IiYVxn6inWS96XcLacdN:GoDmCcveKlhSvClNZ4igsvSdN

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\6488c16568c451a8c4e6dbc54e80033edba5832eecd771bbcdf3eff9b39c77f2.exe
    "C:\Users\Admin\AppData\Local\Temp\6488c16568c451a8c4e6dbc54e80033edba5832eecd771bbcdf3eff9b39c77f2.exe"
    1⤵
      PID:208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/208-0-0x0000023A2FAC0000-0x0000023A2FB17000-memory.dmp

      Filesize

      348KB

      Download

    • memory/208-1-0x0000023A313F0000-0x0000023A31862000-memory.dmp

      Filesize

      4.4MB

      Download