cobaltstrike | a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad | Triage

Sharing

General

Target

a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad
Size

19KB
Sample

240330-l2f3pada2z
MD5

c79d4ecfdf746a65b24680c793d718b1
SHA1

3ad2c35af128edbaf2032ca6897cd60bc19addaa
SHA256

a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad
SHA512

4b92e5154007e074646752b28d1e3158837c16f0ca57943d1177e879023182fd267aa703061a0573e9c5d687e5ff6d3a8613bc676659faaa45b11ca11303514a
SSDEEP

192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2WqGjWF8qa1Dojjgi:mqaCF31cix+Dc4zjTqxFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://116.62.34.159:443/b1hb

Attributes

user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad
- Size
  
  19KB
- MD5
  
  c79d4ecfdf746a65b24680c793d718b1
- SHA1
  
  3ad2c35af128edbaf2032ca6897cd60bc19addaa
- SHA256
  
  a4380c60aaed60d12b43cc99a76eabc5db79602903650da6f1038f2439aee7ad
- SHA512
  
  4b92e5154007e074646752b28d1e3158837c16f0ca57943d1177e879023182fd267aa703061a0573e9c5d687e5ff6d3a8613bc676659faaa45b11ca11303514a
- SSDEEP
  
  192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2WqGjWF8qa1Dojjgi:mqaCF31cix+Dc4zjTqxFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan