cobaltstrike | 230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704 | Triage

Sharing

General

Target

230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704
Size

1.0MB
Sample

240416-yp3r5scg2v
MD5

ee0000e0963e0762fbf314301ec10b20
SHA1

a0674f26ebe4255bf57e3d4a427a6bd5fdf43b7b
SHA256

230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704
SHA512

fd9362275c9ea04aaab3032525e14222b0ee1217cadc58a348ae6741c8c8e19552d75785e2c64c6bfe663f89f8dd77e5822cb237f0d338d325b2fccb00fc2e95
SSDEEP

24576:1oXiAT8Sdw01rrb/TmvO90d7HjmAFd4A64nsfJvzj43Sgv6z0r:uXiC8Sdl1rrb/TmvO90d7HjmAFd4A64H

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.3.35:80/cFGm

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)

Targets

- Target
  
  230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704
- Size
  
  1.0MB
- MD5
  
  ee0000e0963e0762fbf314301ec10b20
- SHA1
  
  a0674f26ebe4255bf57e3d4a427a6bd5fdf43b7b
- SHA256
  
  230ef5d92ea73f38d381768a8ba53c076a71d357dde25213ef608fb88fc1c704
- SHA512
  
  fd9362275c9ea04aaab3032525e14222b0ee1217cadc58a348ae6741c8c8e19552d75785e2c64c6bfe663f89f8dd77e5822cb237f0d338d325b2fccb00fc2e95
- SSDEEP
  
  24576:1oXiAT8Sdw01rrb/TmvO90d7HjmAFd4A64nsfJvzj43Sgv6z0r:uXiC8Sdl1rrb/TmvO90d7HjmAFd4A64H
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan