cobaltstrike | 499559b5a25fe251cb6eee73344008cd7b4af21af19519dd00029eee1ae3e72e | Triage

Sharing

General

Target

499559b5a25fe251cb6eee73344008cd7b4af21af19519dd00029eee1ae3e72e
Size

19KB
Sample

240330-lzkcbsch7s
MD5

f95fa6d5e1ec2c78e72e5c42b2a7d239
SHA1

1386e6cbe3ab2a45a5cf29b04bc4ea024c92690c
SHA256

499559b5a25fe251cb6eee73344008cd7b4af21af19519dd00029eee1ae3e72e
SHA512

a1cae7fed7f48a937cff8b5bd941067d31ab57beda188e0968a1d5857405e553c412a8d10702c14ec0fb28d0d1d07ceeb0566f0081e0a1efbb1d78891a68b835
SSDEEP

192:pV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2cArZykWF8qa1Dojjgi:LqaCF31cix+Dc4zjeOFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.143.175.225:8000/vQHN

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)

Targets

- Target
  
  499559b5a25fe251cb6eee73344008cd7b4af21af19519dd00029eee1ae3e72e
- Size
  
  19KB
- MD5
  
  f95fa6d5e1ec2c78e72e5c42b2a7d239
- SHA1
  
  1386e6cbe3ab2a45a5cf29b04bc4ea024c92690c
- SHA256
  
  499559b5a25fe251cb6eee73344008cd7b4af21af19519dd00029eee1ae3e72e
- SHA512
  
  a1cae7fed7f48a937cff8b5bd941067d31ab57beda188e0968a1d5857405e553c412a8d10702c14ec0fb28d0d1d07ceeb0566f0081e0a1efbb1d78891a68b835
- SSDEEP
  
  192:pV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2cArZykWF8qa1Dojjgi:LqaCF31cix+Dc4zjeOFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan