cobaltstrike | c8e00b5e215314f31ba4ef3f57a4cdef829511619728a074d440a45cd6a4d465 | Triage

Sharing

General

Target

c8e00b5e215314f31ba4ef3f57a4cdef829511619728a074d440a45cd6a4d465
Size

1.4MB
Sample

240423-e2977sda6x
MD5

7024f16ebdb4735e12647d3f4a341981
SHA1

223cbe6b2a98e831e943e160345ba11590db625c
SHA256

c8e00b5e215314f31ba4ef3f57a4cdef829511619728a074d440a45cd6a4d465
SHA512

d25c2f2f7ae7e0ce8b88ffda5991df1d4e279773ad34b065acffc90dab86dfef8231f19132b63701d2225ad5c4c95e879fa4434ba5fa889848d08c0f70239140
SSDEEP

12288:k8F5hZSc8v+nzJj6KrrokzTwtKMti/4gHVL4rwSZop/jZ58RJ6P08ymPYsJIy2So:XNHi+nNrxzTikWAZe6lYsQfKAv2D

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://18.182.54.75:1212/Iex7

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LBBROWSER)

Targets

- Target
  
  c8e00b5e215314f31ba4ef3f57a4cdef829511619728a074d440a45cd6a4d465
- Size
  
  1.4MB
- MD5
  
  7024f16ebdb4735e12647d3f4a341981
- SHA1
  
  223cbe6b2a98e831e943e160345ba11590db625c
- SHA256
  
  c8e00b5e215314f31ba4ef3f57a4cdef829511619728a074d440a45cd6a4d465
- SHA512
  
  d25c2f2f7ae7e0ce8b88ffda5991df1d4e279773ad34b065acffc90dab86dfef8231f19132b63701d2225ad5c4c95e879fa4434ba5fa889848d08c0f70239140
- SSDEEP
  
  12288:k8F5hZSc8v+nzJj6KrrokzTwtKMti/4gHVL4rwSZop/jZ58RJ6P08ymPYsJIy2So:XNHi+nNrxzTikWAZe6lYsQfKAv2D
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan