cobaltstrike | fcfb58a946ac439b29790d21b7d91bcfea1f712c6c59d2615c8e4488bcf7f3e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abcda32e5175106e924c6c54aa9d668c
Size

5.6MB
Sample

240228-nvgrraaf95
MD5

abcda32e5175106e924c6c54aa9d668c
SHA1

afda1a8b53b8762400747a1c29daa14987eeb0d8
SHA256

fcfb58a946ac439b29790d21b7d91bcfea1f712c6c59d2615c8e4488bcf7f3e9
SHA512

dd01885d063630e359f52b8a2c4b70879fe27d00e1208121c535bbb7db3e939059a86d33cbb431084d689b727ebb80053853ed05b3f7d51d883734964e4b1476
SSDEEP

49152:0WpYpBG9KjO+oZcsbej9U1pCOx7NE4WpYpBG9KjO+oZcsbej9U1pCOx7NE:r6BjcZcj6Mf6BjcZcj6M

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.200.61.207:65501/KZEs

Attributes

user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Targets

- Target
  
  abcda32e5175106e924c6c54aa9d668c
- Size
  
  5.6MB
- MD5
  
  abcda32e5175106e924c6c54aa9d668c
- SHA1
  
  afda1a8b53b8762400747a1c29daa14987eeb0d8
- SHA256
  
  fcfb58a946ac439b29790d21b7d91bcfea1f712c6c59d2615c8e4488bcf7f3e9
- SHA512
  
  dd01885d063630e359f52b8a2c4b70879fe27d00e1208121c535bbb7db3e939059a86d33cbb431084d689b727ebb80053853ed05b3f7d51d883734964e4b1476
- SSDEEP
  
  49152:0WpYpBG9KjO+oZcsbej9U1pCOx7NE4WpYpBG9KjO+oZcsbej9U1pCOx7NE:r6BjcZcj6Mf6BjcZcj6M
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan