cobaltstrike | 749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952
Size

19KB
Sample

231225-qgyjfsaea3
MD5

2f9b50a66bf1c19cf9ee45045aa17890
SHA1

bde14518c24dc93eab4d3c0b0aa7a4d1e6f59d74
SHA256

749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952
SHA512

0995a61a5bb8e918b281b584e0d2189fc4159ce59a97b1a8dbdc05f1f57c98fd1648f433c2ec0b07073f7c5085db1a4c07b9432f202a68b531b7456f33473bb0
SSDEEP

192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tBlFjYBWF8qa1Dojjgi:3qaCF31cix+Dc4zjSl5dFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.174.135:4444/puE3

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0; msn OptimizedIE8;ENUS)

Targets

- Target
  
  749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952
- Size
  
  19KB
- MD5
  
  2f9b50a66bf1c19cf9ee45045aa17890
- SHA1
  
  bde14518c24dc93eab4d3c0b0aa7a4d1e6f59d74
- SHA256
  
  749a58ad2271a3960b5e8c9ce8b7bde96c9d8124f5793c60c2b010833bffc952
- SHA512
  
  0995a61a5bb8e918b281b584e0d2189fc4159ce59a97b1a8dbdc05f1f57c98fd1648f433c2ec0b07073f7c5085db1a4c07b9432f202a68b531b7456f33473bb0
- SSDEEP
  
  192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tBlFjYBWF8qa1Dojjgi:3qaCF31cix+Dc4zjSl5dFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan