cobaltstrike | 226756d5656a0c88d385c226d4e56200815144449d224115d5f36010e44e11ac | Triage

Sharing

General

Target

226756d5656a0c88d385c226d4e56200815144449d224115d5f36010e44e11ac
Size

1.3MB
Sample

240417-e5h8wsdg87
MD5

1fc57397bb83ee61725017079e09fdb9
SHA1

778443f83bcdf36e5fbf36a0de2944ff903ffa78
SHA256

226756d5656a0c88d385c226d4e56200815144449d224115d5f36010e44e11ac
SHA512

66913d823ee8202e8363896df78afdeab7481672fec9333e2041baaa3389d0676382b86d8858b8b14f492490952ea9b3f605016e10569f375f0d9775faa75334
SSDEEP

24576:yABhl7NetM+B15txQC/RZNMd5O4K1ywe/zuN+hZJ:/vNetXHedw1WQ+h

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.199.20.219:56580/jquery-3.3.2.slim.min.js

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  226756d5656a0c88d385c226d4e56200815144449d224115d5f36010e44e11ac
- Size
  
  1.3MB
- MD5
  
  1fc57397bb83ee61725017079e09fdb9
- SHA1
  
  778443f83bcdf36e5fbf36a0de2944ff903ffa78
- SHA256
  
  226756d5656a0c88d385c226d4e56200815144449d224115d5f36010e44e11ac
- SHA512
  
  66913d823ee8202e8363896df78afdeab7481672fec9333e2041baaa3389d0676382b86d8858b8b14f492490952ea9b3f605016e10569f375f0d9775faa75334
- SSDEEP
  
  24576:yABhl7NetM+B15txQC/RZNMd5O4K1ywe/zuN+hZJ:/vNetXHedw1WQ+h
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan