ff2089a54ca004b8fa1d03f8a566abade26fded8528a4acfd1fe1bda260683d1

Analysis

max time kernel
71s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
05/03/2025, 21:06

Target

2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe
Size

8.3MB
MD5

ebee175c957635fd3d09faa0812f836f
SHA1

cc692d6e99eaaea73d78a528d3bc011ee3d35377
SHA256

ff2089a54ca004b8fa1d03f8a566abade26fded8528a4acfd1fe1bda260683d1
SHA512

087812cdafbe4a6e607d12cb9e8f0bb1846ae4fde92e451c772907a7f5b3bb71f0b19a11989b8409d214dbb9a6fce3f591201122a7fab1a4c13bb02c035d5414
SSDEEP

98304:/HpBFb/bBzfAlqyea6gp57hR1g3bqOb6CUj:/pXbpjnk7hR1g+Ob6

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4136	2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe

C:\Users\Admin\AppData\Local\Temp\2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-05_ebee175c957635fd3d09faa0812f836f_cobalt-strike_megazord.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4136