cobaltstrike | f814d066b06c07e050ece36bc3e995eecbca82219fa6ca6cbe2812ded36f2a5f | Triage

Sharing

General

Target

f814d066b06c07e050ece36bc3e995eecbca82219fa6ca6cbe2812ded36f2a5f
Size

19KB
Sample

240418-hx2baaec75
MD5

222022cfef1f3f203e3b4a4228a4aafe
SHA1

5bf46f3740c1ca9afc25ee276fe4102755b042d8
SHA256

f814d066b06c07e050ece36bc3e995eecbca82219fa6ca6cbe2812ded36f2a5f
SHA512

6547af2ed92bc7d5fd4c1e247ad57e83f99492407fb97c4a19967ffca434bf133654c03ac8cedfd3c1c573d9cd9518abd393e4f825893ca66c55f68837fc8fe9
SSDEEP

192:tV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2gizTDDWF8qa1Dojjgi:fqaCF31cix+Dc4zjgTGFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.43.128:80/jh1Z

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)

Targets

- Target
  
  f814d066b06c07e050ece36bc3e995eecbca82219fa6ca6cbe2812ded36f2a5f
- Size
  
  19KB
- MD5
  
  222022cfef1f3f203e3b4a4228a4aafe
- SHA1
  
  5bf46f3740c1ca9afc25ee276fe4102755b042d8
- SHA256
  
  f814d066b06c07e050ece36bc3e995eecbca82219fa6ca6cbe2812ded36f2a5f
- SHA512
  
  6547af2ed92bc7d5fd4c1e247ad57e83f99492407fb97c4a19967ffca434bf133654c03ac8cedfd3c1c573d9cd9518abd393e4f825893ca66c55f68837fc8fe9
- SSDEEP
  
  192:tV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2gizTDDWF8qa1Dojjgi:fqaCF31cix+Dc4zjgTGFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan