cobaltstrike | d1b7c8adda65d9f2d3c8e1b1085458c20ffbec0a14c7b9bc571026fe00b56cea | Triage

Sharing

General

Target

d1b7c8adda65d9f2d3c8e1b1085458c20ffbec0a14c7b9bc571026fe00b56cea
Size

423KB
Sample

240329-sf9ansba8s
MD5

0cbe5e9eb925650ae2637fc171770689
SHA1

a46309d54abddefc3e96ab8316c0dd3f853fa7a0
SHA256

d1b7c8adda65d9f2d3c8e1b1085458c20ffbec0a14c7b9bc571026fe00b56cea
SHA512

82f8b082842e0ac0e80ede8eec9eb76fbf865c33cfb4cd36ec26b4431835df5ac87378dba8192163a19a0844d9eb2f0341b56c573035ce97e7867ded168d6d19
SSDEEP

3072:146YJeQJxhAgvDtXlW6CoU7on12W4WQmg32hE0nuKo0Lrgu6cO4MQq3jq4FCgDjP:14HoWJDBlSCmj3jqUtbUilcAOPFs

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://��/uGHX:808333358I��Ey�KI�纆M��

Attributes

user_agent
I��Ey�KI�纆M��

Targets

- Target
  
  d1b7c8adda65d9f2d3c8e1b1085458c20ffbec0a14c7b9bc571026fe00b56cea
- Size
  
  423KB
- MD5
  
  0cbe5e9eb925650ae2637fc171770689
- SHA1
  
  a46309d54abddefc3e96ab8316c0dd3f853fa7a0
- SHA256
  
  d1b7c8adda65d9f2d3c8e1b1085458c20ffbec0a14c7b9bc571026fe00b56cea
- SHA512
  
  82f8b082842e0ac0e80ede8eec9eb76fbf865c33cfb4cd36ec26b4431835df5ac87378dba8192163a19a0844d9eb2f0341b56c573035ce97e7867ded168d6d19
- SSDEEP
  
  3072:146YJeQJxhAgvDtXlW6CoU7on12W4WQmg32hE0nuKo0Lrgu6cO4MQq3jq4FCgDjP:14HoWJDBlSCmj3jqUtbUilcAOPFs
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan