Overview

overview

10

Static

static

e29626e9cf...0e.exe

windows7_x64

3

e29626e9cf...0e.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e29626e9cf755cc084adf9c08b0f6fd5750d86f5cfe580ca971c29c0110f590e

  • Size

    252KB

  • Sample

    220704-aclq4affh3

  • MD5

    ba170b8e67894178b768b38bce05bfb5

  • SHA1

    c0cd01af7e9876f060b292cc595894705dbb2ff7

  • SHA256

    e29626e9cf755cc084adf9c08b0f6fd5750d86f5cfe580ca971c29c0110f590e

  • SHA512

    81a1b0c7a6596761ab106c390df9dc182aa0a6454198ed9c473c9b443514c0c1ab9c3f23d03ce51aac4c609ceaa2f8325e5208ad014e9dd8d62fd4406b0f85ba

Score
10/10
cobaltstrike0backdoorsuricatatrojan

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Targets

    • Target

      e29626e9cf755cc084adf9c08b0f6fd5750d86f5cfe580ca971c29c0110f590e

    • Size

      252KB

    • MD5

      ba170b8e67894178b768b38bce05bfb5

    • SHA1

      c0cd01af7e9876f060b292cc595894705dbb2ff7

    • SHA256

      e29626e9cf755cc084adf9c08b0f6fd5750d86f5cfe580ca971c29c0110f590e

    • SHA512

      81a1b0c7a6596761ab106c390df9dc182aa0a6454198ed9c473c9b443514c0c1ab9c3f23d03ce51aac4c609ceaa2f8325e5208ad014e9dd8d62fd4406b0f85ba

    Score
    10/10
    cobaltstrike0backdoorsuricatatrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • suricata: ET MALWARE Cobalt Strike Beacon Observed

      suricata: ET MALWARE Cobalt Strike Beacon Observed

      suricata

    • suricata: ET MALWARE Successful Cobalt Strike Shellcode Download (x64) M1

      suricata: ET MALWARE Successful Cobalt Strike Shellcode Download (x64) M1

      suricata

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks