cobaltstrike | 5686778a457dcee6225e54f5617742b40598385c307ef86f50bce6db39ec3edc | Triage

Sharing

General

Target

5686778a457dcee6225e54f5617742b40598385c307ef86f50bce6db39ec3edc
Size

19KB
Sample

240329-lzje2afc29
MD5

21cdf01267ec3c60675960d7fa5e560e
SHA1

9e441aab69a2d33b2ec04ca2c28e6c5e88d4690a
SHA256

5686778a457dcee6225e54f5617742b40598385c307ef86f50bce6db39ec3edc
SHA512

fbf64e5d7c250f1c33a5c8a182e1d776954e3f39592821db1c2f007a531e1c0013eabd823e04727186db89bcefaca0c406bcbf010b17902cf6d162704164eb89
SSDEEP

192:AV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2hhDsdVAWF8qa1Dojjgi:iqaCF31cix+Dc4zjWOFFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.13.37.11:80/eAMj

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)

Targets

- Target
  
  5686778a457dcee6225e54f5617742b40598385c307ef86f50bce6db39ec3edc
- Size
  
  19KB
- MD5
  
  21cdf01267ec3c60675960d7fa5e560e
- SHA1
  
  9e441aab69a2d33b2ec04ca2c28e6c5e88d4690a
- SHA256
  
  5686778a457dcee6225e54f5617742b40598385c307ef86f50bce6db39ec3edc
- SHA512
  
  fbf64e5d7c250f1c33a5c8a182e1d776954e3f39592821db1c2f007a531e1c0013eabd823e04727186db89bcefaca0c406bcbf010b17902cf6d162704164eb89
- SSDEEP
  
  192:AV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2hhDsdVAWF8qa1Dojjgi:iqaCF31cix+Dc4zjWOFFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan