cobaltstrike | 9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a
Size

19KB
Sample

231011-jafazabg47
MD5

453dbe4e4d9a3b934e05073b0046a2a5
SHA1

d45047edaef4f7ceced1432bcdde782ddb382895
SHA256

9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a
SHA512

72f2cad1ab5083d1f32ea887da70f7d31e5ecfe17e5bad9e00dadc66421732edceecb0ddf54dc30c785f73d674ac607c993c79a6e4639dfecdabbdd714436d9e
SSDEEP

192:+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/299FA3uWF8qa1Dojjgi:IqaCF31cix+Dc4zjY9wPFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.128:80/9hoM

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1)

Targets

- Target
  
  9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a
- Size
  
  19KB
- MD5
  
  453dbe4e4d9a3b934e05073b0046a2a5
- SHA1
  
  d45047edaef4f7ceced1432bcdde782ddb382895
- SHA256
  
  9ddeaf1d1adc3cc2895466838267d5b8da6e748c0efe060cf71ee655f535945a
- SHA512
  
  72f2cad1ab5083d1f32ea887da70f7d31e5ecfe17e5bad9e00dadc66421732edceecb0ddf54dc30c785f73d674ac607c993c79a6e4639dfecdabbdd714436d9e
- SSDEEP
  
  192:+V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/299FA3uWF8qa1Dojjgi:IqaCF31cix+Dc4zjY9wPFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan