cobaltstrike | f465af28cb3658ef73f38d17571a617cb628acae767808416c2d89401f2593e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f465af28cb3658ef73f38d17571a617cb628acae767808416c2d89401f2593e2
Size

19KB
Sample

230828-dsv69afb73
MD5

82beeb1bbb0262bd445677705348912c
SHA1

8a89aa7beef189ba50109196a29d894793b14dc8
SHA256

f465af28cb3658ef73f38d17571a617cb628acae767808416c2d89401f2593e2
SHA512

3371db495494dad2183650390510f47b4f70b19d13f9c0c0e392a7c9dfd289f8cd47542f5a273cae4cef49c80d487f73c26e6ea9d07924c5731e096950a7b140
SSDEEP

192:jV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/25cYJia2wXWF8qa1Dojjgi:NqaCF31cix+Dc4zjR21MFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.148.134:80/EYRm

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  f465af28cb3658ef73f38d17571a617cb628acae767808416c2d89401f2593e2
- Size
  
  19KB
- MD5
  
  82beeb1bbb0262bd445677705348912c
- SHA1
  
  8a89aa7beef189ba50109196a29d894793b14dc8
- SHA256
  
  f465af28cb3658ef73f38d17571a617cb628acae767808416c2d89401f2593e2
- SHA512
  
  3371db495494dad2183650390510f47b4f70b19d13f9c0c0e392a7c9dfd289f8cd47542f5a273cae4cef49c80d487f73c26e6ea9d07924c5731e096950a7b140
- SSDEEP
  
  192:jV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/25cYJia2wXWF8qa1Dojjgi:NqaCF31cix+Dc4zjR21MFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan