cobaltstrike | 65ada1a8c24335f466a5ab8571313dab062c949cfe0afd6afc9b7ce40c41337c | Triage

Sharing

General

Target

65ada1a8c24335f466a5ab8571313dab062c949cfe0afd6afc9b7ce40c41337c
Size

1.4MB
Sample

240418-x56y3acg35
MD5

678c8286fc67dbb0bc5186cd0e42a14c
SHA1

548bc79bdef03c7531736844be6ce595275fe53c
SHA256

65ada1a8c24335f466a5ab8571313dab062c949cfe0afd6afc9b7ce40c41337c
SHA512

d66dc762f0ddd4bb86a386e591a6f59bcf28f9ee9049e2def0b91fde4af194a8efeeabc17367353817e11f1e98bdcf6ecb8598133554fce2a300878ab0c31486
SSDEEP

24576:lIum9ffIgbSCL+Bh5taBxfvo0OAH4xLpERUxOO:q94g6TovdO73+

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.199.20.219:56580/jquery-3.3.2.slim.min.js

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  65ada1a8c24335f466a5ab8571313dab062c949cfe0afd6afc9b7ce40c41337c
- Size
  
  1.4MB
- MD5
  
  678c8286fc67dbb0bc5186cd0e42a14c
- SHA1
  
  548bc79bdef03c7531736844be6ce595275fe53c
- SHA256
  
  65ada1a8c24335f466a5ab8571313dab062c949cfe0afd6afc9b7ce40c41337c
- SHA512
  
  d66dc762f0ddd4bb86a386e591a6f59bcf28f9ee9049e2def0b91fde4af194a8efeeabc17367353817e11f1e98bdcf6ecb8598133554fce2a300878ab0c31486
- SSDEEP
  
  24576:lIum9ffIgbSCL+Bh5taBxfvo0OAH4xLpERUxOO:q94g6TovdO73+
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan