cobaltstrike | 99ce9369b4e9eaa33e07e915077855f993950ca9973b2558a7c4d776378ec3b2 | Triage

Sharing

General

Target

99ce9369b4e9eaa33e07e915077855f993950ca9973b2558a7c4d776378ec3b2
Size

19KB
Sample

240417-w4ktrsbd5z
MD5

01e97f8d0fca587b3af71d28759c6227
SHA1

0d3d55a098f381d763f4fb71f6061211297eaac7
SHA256

99ce9369b4e9eaa33e07e915077855f993950ca9973b2558a7c4d776378ec3b2
SHA512

49c5a75cbc83b825a05436d58241442db0afe4480d25f3e39df79c42a0dffd366c3aa8bbb37b367f4e52f147e6188948d75cfa2e88d1f0a98d0c078b1731b9b7
SSDEEP

192:6V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2rcPIcFi/gwSWF8qa1Dojjgi:UqaCF31cix+Dc4zjIS4/1FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.10.129:80/aCvC

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)

Targets

- Target
  
  99ce9369b4e9eaa33e07e915077855f993950ca9973b2558a7c4d776378ec3b2
- Size
  
  19KB
- MD5
  
  01e97f8d0fca587b3af71d28759c6227
- SHA1
  
  0d3d55a098f381d763f4fb71f6061211297eaac7
- SHA256
  
  99ce9369b4e9eaa33e07e915077855f993950ca9973b2558a7c4d776378ec3b2
- SHA512
  
  49c5a75cbc83b825a05436d58241442db0afe4480d25f3e39df79c42a0dffd366c3aa8bbb37b367f4e52f147e6188948d75cfa2e88d1f0a98d0c078b1731b9b7
- SSDEEP
  
  192:6V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2rcPIcFi/gwSWF8qa1Dojjgi:UqaCF31cix+Dc4zjIS4/1FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan