cobaltstrike | 5a05c9d73e329488a78cbe024bc68ba789c91a365b1cc4ace0ae9afa9ceebd84 | Triage

Sharing

General

Target

5a05c9d73e329488a78cbe024bc68ba789c91a365b1cc4ace0ae9afa9ceebd84
Size

22KB
Sample

230825-dbh6csgf69
MD5

1fbe90d1d94ad78b9eb51bd8980d1e10
SHA1

b90ce28e78ed22b2983ef5f642dc6fc61252e5c2
SHA256

5a05c9d73e329488a78cbe024bc68ba789c91a365b1cc4ace0ae9afa9ceebd84
SHA512

b505613703ac3a977b79390374c3afe1f52285a71a36c3fd0d76814aa873035c27ad265072039321b6bceeb88431cb0d10be297a777ffec65f0f4a9c9780f270
SSDEEP

384:aN2VpniSLCOFrx4iYZ8vYc/Y9fAKgLyDo6XGhN6:P5COvBY9qY94KpE6g

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://54.206.88.82:443/favicon2.ico

Attributes

user_agent
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8 User-Agent: Opera/9.80 (Windows NT 6.1; U; zh-cn) Presto/2.9.168 Version/11.50

Targets

- Target
  
  5a05c9d73e329488a78cbe024bc68ba789c91a365b1cc4ace0ae9afa9ceebd84
- Size
  
  22KB
- MD5
  
  1fbe90d1d94ad78b9eb51bd8980d1e10
- SHA1
  
  b90ce28e78ed22b2983ef5f642dc6fc61252e5c2
- SHA256
  
  5a05c9d73e329488a78cbe024bc68ba789c91a365b1cc4ace0ae9afa9ceebd84
- SHA512
  
  b505613703ac3a977b79390374c3afe1f52285a71a36c3fd0d76814aa873035c27ad265072039321b6bceeb88431cb0d10be297a777ffec65f0f4a9c9780f270
- SSDEEP
  
  384:aN2VpniSLCOFrx4iYZ8vYc/Y9fAKgLyDo6XGhN6:P5COvBY9qY94KpE6g
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan