cobaltstrike | b48b7e509f2718f30de1b4503282f950abd0cb96953d63a3635ac8a4cd925711 | Triage

Sharing

General

Target

b48b7e509f2718f30de1b4503282f950abd0cb96953d63a3635ac8a4cd925711
Size

19KB
Sample

240329-lzje2afc28
MD5

facb90ee8f280dbc948f106da9f0b1a0
SHA1

8661c3e27e71c419daeeabf568a5b7d3b0c6c4fe
SHA256

b48b7e509f2718f30de1b4503282f950abd0cb96953d63a3635ac8a4cd925711
SHA512

ebef17be5f1f7e1536b8c2d9f5bc99adb53c755b58c22af9999fa197e26417d797eede0e6d77929ac4cda9f21ce8460e69a73aba468add10ef2ebaac073b90e3
SSDEEP

192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UXA/a1CWF8qa1Dojjgi:CqaCF31cix+Dc4zj7XoUFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.67.128:80/RZeL

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; UHS)

Targets

- Target
  
  b48b7e509f2718f30de1b4503282f950abd0cb96953d63a3635ac8a4cd925711
- Size
  
  19KB
- MD5
  
  facb90ee8f280dbc948f106da9f0b1a0
- SHA1
  
  8661c3e27e71c419daeeabf568a5b7d3b0c6c4fe
- SHA256
  
  b48b7e509f2718f30de1b4503282f950abd0cb96953d63a3635ac8a4cd925711
- SHA512
  
  ebef17be5f1f7e1536b8c2d9f5bc99adb53c755b58c22af9999fa197e26417d797eede0e6d77929ac4cda9f21ce8460e69a73aba468add10ef2ebaac073b90e3
- SSDEEP
  
  192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UXA/a1CWF8qa1Dojjgi:CqaCF31cix+Dc4zj7XoUFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan