cobaltstrike | 4f94527e08239589116280232130732409ec92c28c0ef8943dcbdb8eeb6a3ecf | Triage

Sharing

General

Target

4f94527e08239589116280232130732409ec92c28c0ef8943dcbdb8eeb6a3ecf.exe
Size

1.7MB
Sample

240419-brjeysdf31
MD5

11fb9b098eb4806f43f59c91c0258dd5
SHA1

9c0b3b83792434ab3df0495d3124fc5db4995767
SHA256

4f94527e08239589116280232130732409ec92c28c0ef8943dcbdb8eeb6a3ecf
SHA512

478042531bdcd17a3f0f63cd81ebb26cae5d17af5d3fbb1591e5721c8ce34289b576efd36884982e3d50519def072feb1fd1cfcde7276f613732a03a4f73d49b
SSDEEP

49152:FE6G9taeXe7AbSCDneCYgtPYgn3+2lz1:v7un

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://195.181.245.38:7966/QTUc

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Targets

- Target
  
  4f94527e08239589116280232130732409ec92c28c0ef8943dcbdb8eeb6a3ecf.exe
- Size
  
  1.7MB
- MD5
  
  11fb9b098eb4806f43f59c91c0258dd5
- SHA1
  
  9c0b3b83792434ab3df0495d3124fc5db4995767
- SHA256
  
  4f94527e08239589116280232130732409ec92c28c0ef8943dcbdb8eeb6a3ecf
- SHA512
  
  478042531bdcd17a3f0f63cd81ebb26cae5d17af5d3fbb1591e5721c8ce34289b576efd36884982e3d50519def072feb1fd1cfcde7276f613732a03a4f73d49b
- SSDEEP
  
  49152:FE6G9taeXe7AbSCDneCYgtPYgn3+2lz1:v7un
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan