cobaltstrike | c32df8dbab7b75872a1684888e335672c2dc59e9a0fcabb6fd0d05a1dffb1164 | Triage

Sharing

General

Target

c32df8dbab7b75872a1684888e335672c2dc59e9a0fcabb6fd0d05a1dffb1164
Size

19KB
Sample

240418-b77gqaha4v
MD5

3b987daaaaba28c775d8278e2200d107
SHA1

948e47f00db79dac0f99b28d89ccfc832e18355e
SHA256

c32df8dbab7b75872a1684888e335672c2dc59e9a0fcabb6fd0d05a1dffb1164
SHA512

aa867cf72ed3ff9ac719f481c1360e7cfbff35ccc6e88600fa2dec577118f68c9999fa238f7352cc6d99bb87b20d15e4a54401f196dcc1ab898266d32ea9d0ff
SSDEEP

192:QV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2iaqP9WF8qa1Dojjgi:yqaCF31cix+Dc4zjcFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://114.55.72.98:82/U7wZ

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MANM; MANM)

Targets

- Target
  
  c32df8dbab7b75872a1684888e335672c2dc59e9a0fcabb6fd0d05a1dffb1164
- Size
  
  19KB
- MD5
  
  3b987daaaaba28c775d8278e2200d107
- SHA1
  
  948e47f00db79dac0f99b28d89ccfc832e18355e
- SHA256
  
  c32df8dbab7b75872a1684888e335672c2dc59e9a0fcabb6fd0d05a1dffb1164
- SHA512
  
  aa867cf72ed3ff9ac719f481c1360e7cfbff35ccc6e88600fa2dec577118f68c9999fa238f7352cc6d99bb87b20d15e4a54401f196dcc1ab898266d32ea9d0ff
- SSDEEP
  
  192:QV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2iaqP9WF8qa1Dojjgi:yqaCF31cix+Dc4zjcFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan