Analysis
-
max time kernel
95s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
05/03/2025, 20:55
General
-
Target
2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe
-
Size
8.3MB
-
MD5
ebee175c957635fd3d09faa0812f836f
-
SHA1
cc692d6e99eaaea73d78a528d3bc011ee3d35377
-
SHA256
ff2089a54ca004b8fa1d03f8a566abade26fded8528a4acfd1fe1bda260683d1
-
SHA512
087812cdafbe4a6e607d12cb9e8f0bb1846ae4fde92e451c772907a7f5b3bb71f0b19a11989b8409d214dbb9a6fce3f591201122a7fab1a4c13bb02c035d5414
-
SSDEEP
98304:/HpBFb/bBzfAlqyea6gp57hR1g3bqOb6CUj:/pXbpjnk7hR1g+Ob6
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe"1⤵
- Suspicious use of FindShellTrayWindow