cobaltstrike | 3cf2be99ac5716160932a36a2e428dee73736aaddd91d0b2014566490ffa6c70 | Triage

Sharing

General

Target

3cf2be99ac5716160932a36a2e428dee73736aaddd91d0b2014566490ffa6c70
Size

4.8MB
Sample

230829-bea8taha88
MD5

5af0165e823e302e8893dcaa64d837de
SHA1

265dee7f93d3b6fd5dbd915469d986864809799a
SHA256

3cf2be99ac5716160932a36a2e428dee73736aaddd91d0b2014566490ffa6c70
SHA512

d8e13c9534fa14cc0ae1e181e6b0495998afef4385b0726c212f607e76f295ddc9169b87f8ea74f8028ec357b72aefcd45929999273bed2298b1065621b3848f
SSDEEP

49152:Axw4t7FeJjG4ynN6egGH2aPZenjDGeNmt5EHcaBSC1RfQbcdvFZE:MVFsjkNNNPZinG5EHn1Cb4

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.222.128:3307/9YyR

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Targets

- Target
  
  3cf2be99ac5716160932a36a2e428dee73736aaddd91d0b2014566490ffa6c70
- Size
  
  4.8MB
- MD5
  
  5af0165e823e302e8893dcaa64d837de
- SHA1
  
  265dee7f93d3b6fd5dbd915469d986864809799a
- SHA256
  
  3cf2be99ac5716160932a36a2e428dee73736aaddd91d0b2014566490ffa6c70
- SHA512
  
  d8e13c9534fa14cc0ae1e181e6b0495998afef4385b0726c212f607e76f295ddc9169b87f8ea74f8028ec357b72aefcd45929999273bed2298b1065621b3848f
- SSDEEP
  
  49152:Axw4t7FeJjG4ynN6egGH2aPZenjDGeNmt5EHcaBSC1RfQbcdvFZE:MVFsjkNNNPZinG5EHn1Cb4
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan