cobaltstrike | 0d1fbb35e0a41955bb9e49e3e765be71121a661ba0b374c5e352be5a87639240 | Triage

Sharing

General

Target

testing.exe
Size

72KB
Sample

210505-jzcsnreq1s
MD5

b5d2585a9d50e788a37d6700ed8133cf
SHA1

c6617ceea2106f76078c195a4a86cb7e6fc31507
SHA256

0d1fbb35e0a41955bb9e49e3e765be71121a661ba0b374c5e352be5a87639240
SHA512

70e05be3e01dc7d779f9a8313efc256af5c0819acc1d3b7d0247767ed85fa4f40aa641bf1ebc366310557e88bd9bc25144c5f9a2c8180f58ebc91a44c1d5b6e5

Score

10^/10

cobaltstrike metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

13.59.15.185:16297

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  testing.exe
- Size
  
  72KB
- MD5
  
  b5d2585a9d50e788a37d6700ed8133cf
- SHA1
  
  c6617ceea2106f76078c195a4a86cb7e6fc31507
- SHA256
  
  0d1fbb35e0a41955bb9e49e3e765be71121a661ba0b374c5e352be5a87639240
- SHA512
  
  70e05be3e01dc7d779f9a8313efc256af5c0819acc1d3b7d0247767ed85fa4f40aa641bf1ebc366310557e88bd9bc25144c5f9a2c8180f58ebc91a44c1d5b6e5
Score

10^/10

cobaltstrike metasploit backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikemetasploitbackdoortrojan

behavioral2

cobaltstrikemetasploitbackdoortrojan