cobaltstrike | 8af731a01aa5343991a6d36eea43355c302200f1cdcaabeeb08c671899d057a6 | Triage

Sharing

General

Target

8af731a01aa5343991a6d36eea43355c302200f1cdcaabeeb08c671899d057a6
Size

19KB
Sample

240419-mj8knage92
MD5

f6579c2eb2962075dbb4ca893360610f
SHA1

6ef39a98d510b2aab8e1afc0a5badac8978fe743
SHA256

8af731a01aa5343991a6d36eea43355c302200f1cdcaabeeb08c671899d057a6
SHA512

2463771dadd7720fde51c5df2a3a2c7618c9ef7d7e6faf8a1912fdf6fdf991daf21c95a9a14a4b09dddc09e5ed62def5d05d71a8528bbb3638a1cbcd2bb02b37
SSDEEP

192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/25jWF8qa1Dojjgi:5qaCF31cix+Dc4zjWaFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.0.16.8:39002/hGfH

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; FunWebProducts)

Targets

- Target
  
  8af731a01aa5343991a6d36eea43355c302200f1cdcaabeeb08c671899d057a6
- Size
  
  19KB
- MD5
  
  f6579c2eb2962075dbb4ca893360610f
- SHA1
  
  6ef39a98d510b2aab8e1afc0a5badac8978fe743
- SHA256
  
  8af731a01aa5343991a6d36eea43355c302200f1cdcaabeeb08c671899d057a6
- SHA512
  
  2463771dadd7720fde51c5df2a3a2c7618c9ef7d7e6faf8a1912fdf6fdf991daf21c95a9a14a4b09dddc09e5ed62def5d05d71a8528bbb3638a1cbcd2bb02b37
- SSDEEP
  
  192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/25jWF8qa1Dojjgi:5qaCF31cix+Dc4zjWaFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan