cobaltstrike | b32b9bbfe6aa1f6b2a81fa8de7771cc51516642dcfdad00999011218dfdf8d39 | Triage

Sharing

General

Target

b32b9bbfe6aa1f6b2a81fa8de7771cc51516642dcfdad00999011218dfdf8d39
Size

1.6MB
Sample

240417-3t24maab84
MD5

b67662e7ab14700c6c2b801d345369fe
SHA1

15890171704c6c92c16162b2540b47d5d58f6b30
SHA256

b32b9bbfe6aa1f6b2a81fa8de7771cc51516642dcfdad00999011218dfdf8d39
SHA512

b45e3ff95c8b39e7473e74a1d9490d3603a76b01b3945a778c13e69bf99a8daae67b4d8ed94a324bace656aef8c5d3a4f7bc98a9816d3b71e84425b829b86572
SSDEEP

49152:Zjcu2iKCR3rb/THvO90d7HjmAFd4A64nsfJVgSgvlEXcj51cfH8OZEk:S+RwXi51X

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.136.99.149:5000/kTDZ

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Targets

- Target
  
  b32b9bbfe6aa1f6b2a81fa8de7771cc51516642dcfdad00999011218dfdf8d39
- Size
  
  1.6MB
- MD5
  
  b67662e7ab14700c6c2b801d345369fe
- SHA1
  
  15890171704c6c92c16162b2540b47d5d58f6b30
- SHA256
  
  b32b9bbfe6aa1f6b2a81fa8de7771cc51516642dcfdad00999011218dfdf8d39
- SHA512
  
  b45e3ff95c8b39e7473e74a1d9490d3603a76b01b3945a778c13e69bf99a8daae67b4d8ed94a324bace656aef8c5d3a4f7bc98a9816d3b71e84425b829b86572
- SSDEEP
  
  49152:Zjcu2iKCR3rb/THvO90d7HjmAFd4A64nsfJVgSgvlEXcj51cfH8OZEk:S+RwXi51X
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan