cobaltstrike | 41c60c5b02b4616d112d42a6475e95e87a00d41ac2c5e23dd6f3878af2392a32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41c60c5b02b4616d112d42a6475e95e87a00d41ac2c5e23dd6f3878af2392a32
Size

1.8MB
Sample

230816-fflhdsfe32
MD5

8e6041ab97101a2a2d02b95af055e0d4
SHA1

8aed66c8e13d6875f738b8915b411dd02f40eb53
SHA256

41c60c5b02b4616d112d42a6475e95e87a00d41ac2c5e23dd6f3878af2392a32
SHA512

82716fe5770d1363aa0dee84e4576336518326a921dde2ba5a304225f5c8a57dec4f66f81065893807f1994112159a1200506d18a197f17e30ed2ac67702a0cd
SSDEEP

24576:LiWrk0Cv1oxyj9XmgwHtsF8NcGb+Ec0xMkU8JsU3Aobd0MzKsRwF:WWrk0Cqxyj9uHg8r5d0MzKsRwF

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://:0

http://:443/jquery-3.3.2.slim.min.js

Targets

- Target
  
  41c60c5b02b4616d112d42a6475e95e87a00d41ac2c5e23dd6f3878af2392a32
- Size
  
  1.8MB
- MD5
  
  8e6041ab97101a2a2d02b95af055e0d4
- SHA1
  
  8aed66c8e13d6875f738b8915b411dd02f40eb53
- SHA256
  
  41c60c5b02b4616d112d42a6475e95e87a00d41ac2c5e23dd6f3878af2392a32
- SHA512
  
  82716fe5770d1363aa0dee84e4576336518326a921dde2ba5a304225f5c8a57dec4f66f81065893807f1994112159a1200506d18a197f17e30ed2ac67702a0cd
- SSDEEP
  
  24576:LiWrk0Cv1oxyj9XmgwHtsF8NcGb+Ec0xMkU8JsU3Aobd0MzKsRwF:WWrk0Cqxyj9uHg8r5d0MzKsRwF
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan