cobaltstrike | d0f34ff48544cc6d24362f2442c9aabac441f6437cfd03a65ae74bc80f19cb5c | Triage

Sharing

General

Target

d0f34ff48544cc6d24362f2442c9aabac441f6437cfd03a65ae74bc80f19cb5c
Size

19KB
Sample

240331-l2cp9sae55
MD5

fbb1218b74a8cf1d1dff09ae6bd3fe59
SHA1

237c869605d95818a8c7d644fb2c09b46b322fc1
SHA256

d0f34ff48544cc6d24362f2442c9aabac441f6437cfd03a65ae74bc80f19cb5c
SHA512

bdb5830ca4796d9f422ab40b3009abd18762aa5bb195d6f329ccdd8cac022bf61a0654bbd3736ab563032b8e22d2bae2274a8d64630ee15ad4a0fd4c6ee78b87
SSDEEP

192:9V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2JeDHPwhVbWF8qa1Dojjgi:vqaCF31cix+Dc4zjDeViFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.136.129:23456/hCOc

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Targets

- Target
  
  d0f34ff48544cc6d24362f2442c9aabac441f6437cfd03a65ae74bc80f19cb5c
- Size
  
  19KB
- MD5
  
  fbb1218b74a8cf1d1dff09ae6bd3fe59
- SHA1
  
  237c869605d95818a8c7d644fb2c09b46b322fc1
- SHA256
  
  d0f34ff48544cc6d24362f2442c9aabac441f6437cfd03a65ae74bc80f19cb5c
- SHA512
  
  bdb5830ca4796d9f422ab40b3009abd18762aa5bb195d6f329ccdd8cac022bf61a0654bbd3736ab563032b8e22d2bae2274a8d64630ee15ad4a0fd4c6ee78b87
- SSDEEP
  
  192:9V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2JeDHPwhVbWF8qa1Dojjgi:vqaCF31cix+Dc4zjDeViFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan