cobaltstrike | 8dcd92e774d3ed932464687f0d271cb38a877a9a15eb9a6a932fff44b2556d37 | Triage

Sharing

General

Target

8dcd92e774d3ed932464687f0d271cb38a877a9a15eb9a6a932fff44b2556d37
Size

19KB
Sample

240419-bpdrpacd93
MD5

a00a39943aa25e188aa9f09837c71f2b
SHA1

3024ec4a751ca564000dd59dd0129aec56a5bb7b
SHA256

8dcd92e774d3ed932464687f0d271cb38a877a9a15eb9a6a932fff44b2556d37
SHA512

c3182f766e49e641e75873b18cdc8d5ddf60b78ec72d73c92b1fcf00d7a30b522de2c97bfe3904c4084ac9d1f139315957223e9cae40305840354ff7e030bab1
SSDEEP

192:lV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UaNlajWF8qa1Dojjgi:HqaCF31cix+Dc4zjj6NFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.96.94.114:1111/hfBM

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  8dcd92e774d3ed932464687f0d271cb38a877a9a15eb9a6a932fff44b2556d37
- Size
  
  19KB
- MD5
  
  a00a39943aa25e188aa9f09837c71f2b
- SHA1
  
  3024ec4a751ca564000dd59dd0129aec56a5bb7b
- SHA256
  
  8dcd92e774d3ed932464687f0d271cb38a877a9a15eb9a6a932fff44b2556d37
- SHA512
  
  c3182f766e49e641e75873b18cdc8d5ddf60b78ec72d73c92b1fcf00d7a30b522de2c97bfe3904c4084ac9d1f139315957223e9cae40305840354ff7e030bab1
- SSDEEP
  
  192:lV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2UaNlajWF8qa1Dojjgi:HqaCF31cix+Dc4zjj6NFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan