cobaltstrike | 1724c65a3fad14a8d36cdee60212f61cf76b8e045f599f17b20fb45ac5eee3fd | Triage

Sharing

General

Target

1724c65a3fad14a8d36cdee60212f61cf76b8e045f599f17b20fb45ac5eee3fd
Size

19KB
Sample

230922-q53hbagd3x
MD5

7c245bcaf1140deffc5597af00c4bac2
SHA1

92a585d634ff35160a082c9204a7907244387892
SHA256

1724c65a3fad14a8d36cdee60212f61cf76b8e045f599f17b20fb45ac5eee3fd
SHA512

86136f41f840f014743caaffa912ec997b566d252390111c4fcc4b2bd9a045b398b569ed54c9b0b1ae69f3723ccd962cea92ef67f87ee9689393cc43d7a453bb
SSDEEP

192:UV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bhLQbZWF8qa1Dojjgi:GqaCF31cix+Dc4zjuhUAFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.106.36.180:47080/r4Ho

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)

Targets

- Target
  
  1724c65a3fad14a8d36cdee60212f61cf76b8e045f599f17b20fb45ac5eee3fd
- Size
  
  19KB
- MD5
  
  7c245bcaf1140deffc5597af00c4bac2
- SHA1
  
  92a585d634ff35160a082c9204a7907244387892
- SHA256
  
  1724c65a3fad14a8d36cdee60212f61cf76b8e045f599f17b20fb45ac5eee3fd
- SHA512
  
  86136f41f840f014743caaffa912ec997b566d252390111c4fcc4b2bd9a045b398b569ed54c9b0b1ae69f3723ccd962cea92ef67f87ee9689393cc43d7a453bb
- SSDEEP
  
  192:UV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bhLQbZWF8qa1Dojjgi:GqaCF31cix+Dc4zjuhUAFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan