cobaltstrike | 20644ab59d93ff209693d1eb3c40bbb601043ccf148707834e5c1f3f1995487f | Triage

Sharing

General

Target

20644ab59d93ff209693d1eb3c40bbb601043ccf148707834e5c1f3f1995487f
Size

19KB
Sample

231006-2vdxraae96
MD5

677faad1583dcc33c379d29967f19de3
SHA1

1a19f9ffe043357ac8acc00a11ecec147e3c1087
SHA256

20644ab59d93ff209693d1eb3c40bbb601043ccf148707834e5c1f3f1995487f
SHA512

516c92ade235e9912c1aa7154d5b7431320a6d6ad5b1a3a18643217030727e59b581aa532a55409366cbab78f3cbcb2b0bfb4d0e729353afa077bf95db5501d5
SSDEEP

192:PV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/259+CWF8qa1Dojjgi:JqaCF31cix+Dc4zjI+7FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.35.75.134:8888/Mes8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts; IE0006_ver1;EN_GB)

Targets

- Target
  
  20644ab59d93ff209693d1eb3c40bbb601043ccf148707834e5c1f3f1995487f
- Size
  
  19KB
- MD5
  
  677faad1583dcc33c379d29967f19de3
- SHA1
  
  1a19f9ffe043357ac8acc00a11ecec147e3c1087
- SHA256
  
  20644ab59d93ff209693d1eb3c40bbb601043ccf148707834e5c1f3f1995487f
- SHA512
  
  516c92ade235e9912c1aa7154d5b7431320a6d6ad5b1a3a18643217030727e59b581aa532a55409366cbab78f3cbcb2b0bfb4d0e729353afa077bf95db5501d5
- SSDEEP
  
  192:PV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/259+CWF8qa1Dojjgi:JqaCF31cix+Dc4zjI+7FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan