cobaltstrike | 6d0311a34e8f6d1b5ce350ac815dc07f511f80e50539dc18ae77308955750b20 | Triage

Sharing

General

Target

1dcf860dc9973ddaa69998b46a32f9e7
Size

763KB
Sample

231230-1vs61agfbj
MD5

1dcf860dc9973ddaa69998b46a32f9e7
SHA1

70c7599f29748efb40f42364267c5bfed1aeee64
SHA256

6d0311a34e8f6d1b5ce350ac815dc07f511f80e50539dc18ae77308955750b20
SHA512

1e9a738f211db5a49d8082c5ddb0ef7901710841a7c46b6d90259290826680268db98eef1f7c58c38d417fe65d99fface887240254fd5be6f470a48242661a56
SSDEEP

6144:whVcmtnGGLSk6V51leGnTtS+SkJwghaQI9VQB2PCjMkG6AnKzV7Ze5PLm/b6BroR:w3ntnGGL96X1lD9rnIFeyPDoXBdvR

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.96.129.92:9999/6Pbu

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)

Targets

- Target
  
  1dcf860dc9973ddaa69998b46a32f9e7
- Size
  
  763KB
- MD5
  
  1dcf860dc9973ddaa69998b46a32f9e7
- SHA1
  
  70c7599f29748efb40f42364267c5bfed1aeee64
- SHA256
  
  6d0311a34e8f6d1b5ce350ac815dc07f511f80e50539dc18ae77308955750b20
- SHA512
  
  1e9a738f211db5a49d8082c5ddb0ef7901710841a7c46b6d90259290826680268db98eef1f7c58c38d417fe65d99fface887240254fd5be6f470a48242661a56
- SSDEEP
  
  6144:whVcmtnGGLSk6V51leGnTtS+SkJwghaQI9VQB2PCjMkG6AnKzV7Ze5PLm/b6BroR:w3ntnGGL96X1lD9rnIFeyPDoXBdvR
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan