Overview

overview

10

Static

static

agent.exe

windows7_x64

10

agent.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.zip

  • Size

    338KB

  • Sample

    220702-pqjwzshac5

  • MD5

    7f42f30ada23e46219faaa4d07ae7014

  • SHA1

    209db46c2ade5ff71383eb111fc39966eb128030

  • SHA256

    b03966fc4e7fe073850adecb869f8ed57ae58db6c30bc1c3e50feeb8b5a2e540

  • SHA512

    14f513a1587a023f2e40117c43e698ca5de7c1b0740c927172638bbc7024d739a3d52f1b74c11240dc31b3ec98cd953db7a04d51ad6e7d9e8afc1487b7c3d111

Score
10/10
cobaltstrikebackdoorsuricatatrojan

Malware Config

Targets

    • Target

      agent.exe

    • Size

      545KB

    • MD5

      30d90a6fdb0f3f470579cc0e3e1d36fa

    • SHA1

      fa4c52785712d11db6eb7a45ab2bd4eed2c12c3d

    • SHA256

      4f5c8b187e20ed826c9e16ace0333b554d8345f97cd57cb4778d10915c059443

    • SHA512

      bd50b9a087b528c16c4d753f1c0dd54c1ecd42ff191f3e055a05fc9b8be685ff98cdc2fdfd8c6e3dc707709cf71b103e9894faf3e274de137528d98800877039

    Score
    10/10
    cobaltstrikebackdoorsuricatatrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks