cobaltstrike | 6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab | Triage

Sharing

General

Target

6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab
Size

19KB
Sample

231226-nlr65aeba7
MD5

7ff7a7e8ae51d8aebb8ca5c8f4c093e3
SHA1

545a54c7e0b04e963759b113ac141316fd677ec1
SHA256

6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab
SHA512

412b7294928b879f5abbab2a7ed07d41cdae62a4aef90dde97376569bced7d9c1490d3cd7a5b7f36add7d1ec6e3f371cffe667e8ae029a252558eb57e2c87add
SSDEEP

192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2J5RyWF8qa1Dojjgi:3qaCF31cix+Dc4zjq5JFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.199.128:8888/NOmS

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)

Targets

- Target
  
  6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab
- Size
  
  19KB
- MD5
  
  7ff7a7e8ae51d8aebb8ca5c8f4c093e3
- SHA1
  
  545a54c7e0b04e963759b113ac141316fd677ec1
- SHA256
  
  6dd8285d3137cc7aca2751b0c59beef27b891b87708eb18a03c71c09fee1feab
- SHA512
  
  412b7294928b879f5abbab2a7ed07d41cdae62a4aef90dde97376569bced7d9c1490d3cd7a5b7f36add7d1ec6e3f371cffe667e8ae029a252558eb57e2c87add
- SSDEEP
  
  192:VV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2J5RyWF8qa1Dojjgi:3qaCF31cix+Dc4zjq5JFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan