cobaltstrike | 6b411bc60165633209d6894e4c058fa7f1ff7fbd31eb6106f7601901c15d3ce3 | Triage

Sharing

General

Target

6b411bc60165633209d6894e4c058fa7f1ff7fbd31eb6106f7601901c15d3ce3
Size

19KB
Sample

240423-pr63xagb9s
MD5

712988367ceb2e558a5dbf0d4733e23b
SHA1

6c0dfd519a9ef8041d1d109302b37613a8ca04c0
SHA256

6b411bc60165633209d6894e4c058fa7f1ff7fbd31eb6106f7601901c15d3ce3
SHA512

fab5674e83ec8a02d2ecc28952ab633fb06ae9dab2f299a1d397f8985305bbe09d2761d915c51e1db15e3632f9018878164f11ae3efdcd76a6d60711cf2fa2f7
SSDEEP

192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uwi/YhWF8qa1Dojjgi:wqaCF31cix+Dc4zjbwigcFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.70.99.224:800/GqVO

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSMSE)

Targets

- Target
  
  6b411bc60165633209d6894e4c058fa7f1ff7fbd31eb6106f7601901c15d3ce3
- Size
  
  19KB
- MD5
  
  712988367ceb2e558a5dbf0d4733e23b
- SHA1
  
  6c0dfd519a9ef8041d1d109302b37613a8ca04c0
- SHA256
  
  6b411bc60165633209d6894e4c058fa7f1ff7fbd31eb6106f7601901c15d3ce3
- SHA512
  
  fab5674e83ec8a02d2ecc28952ab633fb06ae9dab2f299a1d397f8985305bbe09d2761d915c51e1db15e3632f9018878164f11ae3efdcd76a6d60711cf2fa2f7
- SSDEEP
  
  192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uwi/YhWF8qa1Dojjgi:wqaCF31cix+Dc4zjbwigcFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan