Extracted

Extracted

• • Target

    http://64.150.190.149.64

  Score

  10^/10

  cobaltstrikeconnectbackbackdoortrojan

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • ConnectBack

    A small Linux reverse shell that establishes a connection back to the attacker.

    backdoorconnectback

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  behavioral1behavioral2