Overview

overview

10

Static

static

1.exe

windows7_x64

10

1.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.exe

  • Size

    545KB

  • Sample

    220703-c2l49scadm

  • MD5

    30d90a6fdb0f3f470579cc0e3e1d36fa

  • SHA1

    fa4c52785712d11db6eb7a45ab2bd4eed2c12c3d

  • SHA256

    4f5c8b187e20ed826c9e16ace0333b554d8345f97cd57cb4778d10915c059443

  • SHA512

    bd50b9a087b528c16c4d753f1c0dd54c1ecd42ff191f3e055a05fc9b8be685ff98cdc2fdfd8c6e3dc707709cf71b103e9894faf3e274de137528d98800877039

Score
10/10
cobaltstrikebackdoorsuricatatrojan

Malware Config

Targets

    • Target

      1.exe

    • Size

      545KB

    • MD5

      30d90a6fdb0f3f470579cc0e3e1d36fa

    • SHA1

      fa4c52785712d11db6eb7a45ab2bd4eed2c12c3d

    • SHA256

      4f5c8b187e20ed826c9e16ace0333b554d8345f97cd57cb4778d10915c059443

    • SHA512

      bd50b9a087b528c16c4d753f1c0dd54c1ecd42ff191f3e055a05fc9b8be685ff98cdc2fdfd8c6e3dc707709cf71b103e9894faf3e274de137528d98800877039

    Score
    10/10
    cobaltstrikebackdoorsuricatatrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata: ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks