cobaltstrike | a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074 | Triage

Sharing

General

Target

a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074
Size

19KB
Sample

240310-jx8k2agc6v
MD5

1cf958721f26350d0536b340cae7507f
SHA1

6154d37e9b59d425e5c4f27501b14320e357086d
SHA256

a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074
SHA512

925364fc98a8c0cf9b8e04e23606e91b62cdc3caa425269e73411e6b8fcae1f309fad5be7490123a15d3df3443031671a2bf61e0d0f4257fbca7b0db435dbea7
SSDEEP

192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Lyxn/WF8qa1Dojjgi:RqaCF31cix+Dc4zjJ+FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.64.130:80/kn7M

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Targets

- Target
  
  a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074
- Size
  
  19KB
- MD5
  
  1cf958721f26350d0536b340cae7507f
- SHA1
  
  6154d37e9b59d425e5c4f27501b14320e357086d
- SHA256
  
  a451a5f0cdd5731ca9d00c98c8183c282606ae453e17df18d0d6b2d04b01b074
- SHA512
  
  925364fc98a8c0cf9b8e04e23606e91b62cdc3caa425269e73411e6b8fcae1f309fad5be7490123a15d3df3443031671a2bf61e0d0f4257fbca7b0db435dbea7
- SSDEEP
  
  192:nV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Lyxn/WF8qa1Dojjgi:RqaCF31cix+Dc4zjJ+FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan