cobaltstrike | hxxp://95[.]213[.]145[.]101[:]8000/ | Triage

Submit
Reports

Overview

overview

Static

static

URLScan

urlscan

1

http://95.213.145.10...

windows10-2004-x64

Resubmissions

19-10-2022 20:57

221019-zrxvcagefn 8

18-10-2022 04:25

221018-e11x5sefgr 10

17-10-2022 22:33

221017-2gv9wadgal 10

Sharing

General

Target

http://95.213.145.101:8000/
Sample

221018-e11x5sefgr

Score

10^/10

cobaltstrike mimikatz backdoor pyinstaller trojan

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://95.213.145.101:8000/

Resource

win10v2004-20220812-en

cobaltstrike mimikatz backdoor pyinstaller trojan

windows10-2004-x64

19 signatures

1800 seconds

Malware Config

Targets

- Target
  
  http://95.213.145.101:8000/
Score

10^/10

cobaltstrike mimikatz backdoor pyinstaller trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Mimikatz
  mimikatz is an open source tool to dump credentials on Windows.
  mimikatz
- mimikatz is an open source tool to dump credentials on Windows
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

cobaltstrikemimikatzbackdoorpyinstallertrojan

© 2018-2025

Terms | Privacy