cobaltstrike | 83f06213409abbf39756e856aea050e2b7b40b0c488ac6b966b15cbb2ec1e5fc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
83f06213409abbf39756e856aea050e2b7b40b0c488ac6b966b15cbb2ec1e5fc
Size 1.7MB
Sample211022-jnpfsscbej
SHA256 83f06213409abbf39756e856aea050e2b7b40b0c488ac6b966b15cbb2ec1e5fc
MD5 1d7fa8815a5b11435b9aa0a851cfeeb2
SHA1 4bb3d31b1f49abd55f23c996be157cabb39771b9
SHA512 150acf82b8753cd08665c53a15b762cc8f4817e8e5ff461e07074157fc8d0c0316f278d6e298301b100308846a63abb15d23700522e7f0837a544a692cee6541
MD5 SHA1 SHA512

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.50.210:80/Rdu2

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Targets

- Target
  83f06213409abbf39756e856aea050e2b7b40b0c488ac6b966b15cbb2ec1e5fc
- Size 1.7MB
- SHA256 83f06213409abbf39756e856aea050e2b7b40b0c488ac6b966b15cbb2ec1e5fc
- MD5 1d7fa8815a5b11435b9aa0a851cfeeb2
- SHA1 4bb3d31b1f49abd55f23c996be157cabb39771b9
- SHA512 150acf82b8753cd08665c53a15b762cc8f4817e8e5ff461e07074157fc8d0c0316f278d6e298301b100308846a63abb15d23700522e7f0837a544a692cee6541
- MD5 SHA1 SHA512
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan