cobaltstrike | ee4d056bf96fab1ed912d93b6ede1f9f6ccec7614580a21c237f8d040cb210bc | Triage

Sharing

General

Target

ee4d056bf96fab1ed912d93b6ede1f9f6ccec7614580a21c237f8d040cb210bc
Size

12KB
Sample

240418-ka8g7afh84
MD5

a5b9b3cd308732c36a53f78717c3dae2
SHA1

bcf81e58778bbd233112b40deefb8ce101057acb
SHA256

ee4d056bf96fab1ed912d93b6ede1f9f6ccec7614580a21c237f8d040cb210bc
SHA512

fa71a7738af4afeebb4a9cd2e9e2c9a4119ddc089ce475685c57123b272c81f36ea5722f66165d468370020cc0959846476e9a4b4636ae9e8e20b53a0f69a347
SSDEEP

192:3cdM4XQy8QLxUqojU9yU9MJlXrs0G2rN3Q5tfBD1:3IMAQy8QL1oYyTzQ0bN3

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://zh.huorong.ga:2096/hZ3h

Attributes

user_agent
User-Agent: Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 5.2) Java/1.5.0_08 Host: zh.huorong.ga

Targets

- Target
  
  ee4d056bf96fab1ed912d93b6ede1f9f6ccec7614580a21c237f8d040cb210bc
- Size
  
  12KB
- MD5
  
  a5b9b3cd308732c36a53f78717c3dae2
- SHA1
  
  bcf81e58778bbd233112b40deefb8ce101057acb
- SHA256
  
  ee4d056bf96fab1ed912d93b6ede1f9f6ccec7614580a21c237f8d040cb210bc
- SHA512
  
  fa71a7738af4afeebb4a9cd2e9e2c9a4119ddc089ce475685c57123b272c81f36ea5722f66165d468370020cc0959846476e9a4b4636ae9e8e20b53a0f69a347
- SSDEEP
  
  192:3cdM4XQy8QLxUqojU9yU9MJlXrs0G2rN3Q5tfBD1:3IMAQy8QL1oYyTzQ0bN3
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan