cobaltstrike | 4a419add35f297a99f3e9f3dbd0fa3e0201d9beae2acca2360e6e46ce95dee73 | Triage

Sharing

General

Target

4a419add35f297a99f3e9f3dbd0fa3e0201d9beae2acca2360e6e46ce95dee73
Size

19KB
Sample

240416-wqtvhsgh62
MD5

6b926d74fa363c3cd8bc486db793a63c
SHA1

1495c3534c060e6a204302c5bf7e8548a32cef01
SHA256

4a419add35f297a99f3e9f3dbd0fa3e0201d9beae2acca2360e6e46ce95dee73
SHA512

1677813e6a7c463caa1992588e0c0405ba17241183f5082101d577a7e1db7724e4df76f5cc8da6dc009fe28362787b1f229c67544c1c87adf189318c35734388
SSDEEP

192:KV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2g3gjWF8qa1Dojjgi:kqaCF31cix+Dc4zj1gaFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.20.165:4430/MMUn

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Targets

- Target
  
  4a419add35f297a99f3e9f3dbd0fa3e0201d9beae2acca2360e6e46ce95dee73
- Size
  
  19KB
- MD5
  
  6b926d74fa363c3cd8bc486db793a63c
- SHA1
  
  1495c3534c060e6a204302c5bf7e8548a32cef01
- SHA256
  
  4a419add35f297a99f3e9f3dbd0fa3e0201d9beae2acca2360e6e46ce95dee73
- SHA512
  
  1677813e6a7c463caa1992588e0c0405ba17241183f5082101d577a7e1db7724e4df76f5cc8da6dc009fe28362787b1f229c67544c1c87adf189318c35734388
- SSDEEP
  
  192:KV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2g3gjWF8qa1Dojjgi:kqaCF31cix+Dc4zj1gaFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan