cobaltstrike | 24aa4a38544814f3c33269086e8f7b3ee1960413be3d6dae5cd041a7384c29d3 | Triage

Sharing

General

Target

24aa4a38544814f3c33269086e8f7b3ee1960413be3d6dae5cd041a7384c29d3
Size

19KB
Sample

240415-qc1g9ahd3x
MD5

6d1d5432d85588dae4a54b1bd983cc37
SHA1

b640675328b570b122c72c4bba9f740d13dbb62f
SHA256

24aa4a38544814f3c33269086e8f7b3ee1960413be3d6dae5cd041a7384c29d3
SHA512

413aa7d9b4b5e06841daaf4ab03ff9aa2eaa1a40a7a99d4d8e8c6f78c09683d1ab9b33284e73514e5ad60e7c8a9b084dceb8353fab4555761a548a31e1aced16
SSDEEP

192:vV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bEdwWF8qa1Dojjgi:pqaCF31cix+Dc4zjdFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.51.158:80/QNKs

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727)

Targets

- Target
  
  24aa4a38544814f3c33269086e8f7b3ee1960413be3d6dae5cd041a7384c29d3
- Size
  
  19KB
- MD5
  
  6d1d5432d85588dae4a54b1bd983cc37
- SHA1
  
  b640675328b570b122c72c4bba9f740d13dbb62f
- SHA256
  
  24aa4a38544814f3c33269086e8f7b3ee1960413be3d6dae5cd041a7384c29d3
- SHA512
  
  413aa7d9b4b5e06841daaf4ab03ff9aa2eaa1a40a7a99d4d8e8c6f78c09683d1ab9b33284e73514e5ad60e7c8a9b084dceb8353fab4555761a548a31e1aced16
- SSDEEP
  
  192:vV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bEdwWF8qa1Dojjgi:pqaCF31cix+Dc4zjdFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan