cobaltstrike | 757ecb1a43db6d18e1c1797157cdb5253baeb32d8c94adae7b20bd5266ec1f9b | Triage

Sharing

General

Target

1b780b4355cccc3c0f850bba1486db1b.exe
Size

195KB
Sample

220903-dhxmbsgddm
MD5

1b780b4355cccc3c0f850bba1486db1b
SHA1

65305aeacf482d9495b68eec61c1ef64e9b0446c
SHA256

757ecb1a43db6d18e1c1797157cdb5253baeb32d8c94adae7b20bd5266ec1f9b
SHA512

d440e834312704b65409f4f551d34f523009ad0a1371c3687c9f8e41a5aa30212a08a931161a6a1a2818ee3ed33f68c4fe0e272c232366f333f7dabd8c450654
SSDEEP

3072:dryEFdApaWVzPCWdEcCb6Xc8F9u7CC/CaFwT8FJ2AB2O9D5pZa9uD6Vdyhk7:FRFdAUEzPib4tF9EDCam2BXnwVf7

Score

10^/10

cobaltstrike metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

188.119.112.85:443

Targets

- Target
  
  1b780b4355cccc3c0f850bba1486db1b.exe
- Size
  
  195KB
- MD5
  
  1b780b4355cccc3c0f850bba1486db1b
- SHA1
  
  65305aeacf482d9495b68eec61c1ef64e9b0446c
- SHA256
  
  757ecb1a43db6d18e1c1797157cdb5253baeb32d8c94adae7b20bd5266ec1f9b
- SHA512
  
  d440e834312704b65409f4f551d34f523009ad0a1371c3687c9f8e41a5aa30212a08a931161a6a1a2818ee3ed33f68c4fe0e272c232366f333f7dabd8c450654
- SSDEEP
  
  3072:dryEFdApaWVzPCWdEcCb6Xc8F9u7CC/CaFwT8FJ2AB2O9D5pZa9uD6Vdyhk7:FRFdAUEzPib4tF9EDCam2BXnwVf7
Score

10^/10

cobaltstrike metasploit backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikemetasploitbackdoortrojan

behavioral2

cobaltstrikemetasploitbackdoortrojan