cobaltstrike | 76529a304e05852d823d6670270cdcc0088696337577319bd1e7a20f7202f485 | Triage

Sharing

General

Target

76529a304e05852d823d6670270cdcc0088696337577319bd1e7a20f7202f485
Size

19KB
Sample

240331-lzkcbsad95
MD5

b51e38114d4fa1ca47d8ba93a21133da
SHA1

71b9d20e518164fbca6622c8500ada126ba9714c
SHA256

76529a304e05852d823d6670270cdcc0088696337577319bd1e7a20f7202f485
SHA512

5f0aad5247d4aefa9465f07e59ca31b3d4374fad95c38704e713b0dd8a8beda87dfe525863082ab1b978351b8bd72acc20bf84bdf29c322c53cf48ba56094660
SSDEEP

192:BV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2IAnh2oHWF8qa1Dojjgi:TqaCF31cix+Dc4zjKh2o2FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.6.211:8001/NZiL

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAAU; NP08)

Targets

- Target
  
  76529a304e05852d823d6670270cdcc0088696337577319bd1e7a20f7202f485
- Size
  
  19KB
- MD5
  
  b51e38114d4fa1ca47d8ba93a21133da
- SHA1
  
  71b9d20e518164fbca6622c8500ada126ba9714c
- SHA256
  
  76529a304e05852d823d6670270cdcc0088696337577319bd1e7a20f7202f485
- SHA512
  
  5f0aad5247d4aefa9465f07e59ca31b3d4374fad95c38704e713b0dd8a8beda87dfe525863082ab1b978351b8bd72acc20bf84bdf29c322c53cf48ba56094660
- SSDEEP
  
  192:BV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2IAnh2oHWF8qa1Dojjgi:TqaCF31cix+Dc4zjKh2o2FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan