cobaltstrike | hxxp://167[.]172[.]149[.]29[:]8080/ | Triage

Submit
Reports

Overview

overview

Static

static

URLScan

urlscan

1

http://167.172.149.2...

windows10-2004-x64

Sharing

General

Target

http://167.172.149.29:8080/
Sample

221201-v7z77aff7v

Score

10^/10

cobaltstrike backdoor trojan

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://167.172.149.29:8080/

Resource

win10v2004-20220812-en

cobaltstrike backdoor trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  http://167.172.149.29:8080/
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

urlscan1

behavioral1

cobaltstrikebackdoortrojan

© 2018-2024

Terms | Privacy