cobaltstrike | 819a2a78732fa371bf0a2c3bde17e0c9890a16f9f3285c48b44beea770d4239b | Triage

Sharing

General

Target

tmp
Size

19KB
Sample

240419-lx1ljafd8z
MD5

d67e94df87700a0d3da13f50f56ddb56
SHA1

b2c5336ca6f7ace1071a4eeed5f785c1c33bc2c6
SHA256

819a2a78732fa371bf0a2c3bde17e0c9890a16f9f3285c48b44beea770d4239b
SHA512

871b7b851a323bde15237aa2276a3e3f34af18e9641b058fde0ffcd6fb5b5661b5c3fa92d55f173519ad85219297cd65b4f183c4fb4f5ff71077ba4966eb3239
SSDEEP

192:2V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2VcCWF8qa1Dojjgi:QqaCF31cix+Dc4zjouFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.180.11:7700/zbJ7

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Targets

- Target
  
  tmp
- Size
  
  19KB
- MD5
  
  d67e94df87700a0d3da13f50f56ddb56
- SHA1
  
  b2c5336ca6f7ace1071a4eeed5f785c1c33bc2c6
- SHA256
  
  819a2a78732fa371bf0a2c3bde17e0c9890a16f9f3285c48b44beea770d4239b
- SHA512
  
  871b7b851a323bde15237aa2276a3e3f34af18e9641b058fde0ffcd6fb5b5661b5c3fa92d55f173519ad85219297cd65b4f183c4fb4f5ff71077ba4966eb3239
- SSDEEP
  
  192:2V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2VcCWF8qa1Dojjgi:QqaCF31cix+Dc4zjouFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan