cobaltstrike | 10678f3fb648646d950c3d5c02e250876699f7676abf4eb37e0d07ee209a2ae5 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17-12-2024 14:53

Sharing

Report Analysis Logs

General

Target

10678f3fb648646d950c3d5c02e250876699f7676abf4eb37e0d07ee209a2ae5.dll
Size

270KB
MD5

79471ed69c14b1c5b791aa329f3bd772
SHA1

b6f41f643b4212dc1379ac3ec49cbd1f186d41b9
SHA256

10678f3fb648646d950c3d5c02e250876699f7676abf4eb37e0d07ee209a2ae5
SHA512

b850e3357024170a0c4ac5229cc92a258d850563de9e191373c05815307b88da9cc5712ca88eb45340c8ef03893592453467526063eb5ca2a32629eb871584c9
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7zOGIkfhUYJF6vzHkV:rzbUWootfDCvT4ZTXzCLtIk5UDarKM

Score

10^/10

cobaltstrike 0 backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike
Cobaltstrike family
cobaltstrike

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\10678f3fb648646d950c3d5c02e250876699f7676abf4eb37e0d07ee209a2ae5.dll,#1
1⤵
PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2112-0-0x0000000001E80000-0x0000000001ED2000-memory.dmp

Filesize
328KB

Download
memory/2112-1-0x0000000001E80000-0x0000000001ED2000-memory.dmp

Filesize
328KB

Download