cobaltstrike | 022baecd82f871abb9a1b4022c8f1e5be30edeb82e1eb7bca474539c8bf508f3 | Triage

Submit
Reports

Overview

overview

Static

static

calddera.exe

windows7-x64

calddera.exe

windows10-2004-x64

Sharing

General

Target

calddera.exe
Size

245KB
Sample

220915-s7peksdeb6
MD5

6efd990a26f728971b70137e69864e27
SHA1

8649cf0e553e835b7372b3a6a17cece9b6ab6c74
SHA256

022baecd82f871abb9a1b4022c8f1e5be30edeb82e1eb7bca474539c8bf508f3
SHA512

573283516acf97f7b37b113e31c55a7fd90e90f514e8b78eecec781d6f6166b9e985bda2306d6858ebddc38ccc352ab2393ab7464714a2c7087fa7a5229d506c
SSDEEP

6144:7qGdXu6w+0Nc8QsOks9/bkgXrf9ha8DYKFZZFNuj:Hlu6pbks9AgbfvqEZ2

Score

10^/10

cobaltstrike metasploit backdoor trojan

Static task

static1

metasploit cobaltstrike

2 signatures

Behavioral task

behavioral1

Sample

calddera.exe

Resource

win7-20220812-en

cobaltstrike metasploit backdoor trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

calddera.exe

Resource

win10v2004-20220812-en

cobaltstrike metasploit backdoor trojan

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  calddera.exe
- Size
  
  245KB
- MD5
  
  6efd990a26f728971b70137e69864e27
- SHA1
  
  8649cf0e553e835b7372b3a6a17cece9b6ab6c74
- SHA256
  
  022baecd82f871abb9a1b4022c8f1e5be30edeb82e1eb7bca474539c8bf508f3
- SHA512
  
  573283516acf97f7b37b113e31c55a7fd90e90f514e8b78eecec781d6f6166b9e985bda2306d6858ebddc38ccc352ab2393ab7464714a2c7087fa7a5229d506c
- SSDEEP
  
  6144:7qGdXu6w+0Nc8QsOks9/bkgXrf9ha8DYKFZZFNuj:Hlu6pbks9AgbfvqEZ2
Score

10^/10

cobaltstrike metasploit backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

metasploitcobaltstrike

behavioral1

cobaltstrikemetasploitbackdoortrojan

behavioral2

cobaltstrikemetasploitbackdoortrojan

© 2018-2024

Terms | Privacy