cobaltstrike | a85283c2324e2edca848e2aebec2067be80e7215d554b9d76598973e9d587aa6 | Triage

Resubmissions

21-09-2024 09:32

240921-lhpkqavhnk 10

06-03-2022 21:00

220306-zta4csgfhp 10

Sharing

General

Target

a85283c2324e2edca848e2aebec2067be80e7215d554b9d76598973e9d587aa6
Size

40KB
Sample

220306-zta4csgfhp
MD5

017831928f431423db720ede2c499be7
SHA1

5cec6722b5ae7f976447a69bf106e1789af22795
SHA256

a85283c2324e2edca848e2aebec2067be80e7215d554b9d76598973e9d587aa6
SHA512

47569e8685ebd8f7d5994ab99b74302bb1cec84db0edde430026797bd0fd3c668a223d8efd2573cdf3ad0a06d5effc65f265a5b20eeafe246ed8f5ad271c1963

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.93.116.52:25678/Z9Tv

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Avant Browser)

Targets

- Target
  
  a85283c2324e2edca848e2aebec2067be80e7215d554b9d76598973e9d587aa6
- Size
  
  40KB
- MD5
  
  017831928f431423db720ede2c499be7
- SHA1
  
  5cec6722b5ae7f976447a69bf106e1789af22795
- SHA256
  
  a85283c2324e2edca848e2aebec2067be80e7215d554b9d76598973e9d587aa6
- SHA512
  
  47569e8685ebd8f7d5994ab99b74302bb1cec84db0edde430026797bd0fd3c668a223d8efd2573cdf3ad0a06d5effc65f265a5b20eeafe246ed8f5ad271c1963
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan