cobaltstrike | 9481f8a02f0740b56d711b64cdbf841384954394ad2a8f6dd3c763c5e85ab56b | Triage

Sharing

General

Target

9481f8a02f0740b56d711b64cdbf841384954394ad2a8f6dd3c763c5e85ab56b
Size

19KB
Sample

240423-qperbagf2v
MD5

f6bee457532a7b9b896e32b50c9923fb
SHA1

fc6b4ceee341615d2732d2470edf3ea9d2749b06
SHA256

9481f8a02f0740b56d711b64cdbf841384954394ad2a8f6dd3c763c5e85ab56b
SHA512

cf80322b35493d69410f5b635f1ff694eaa2f69fb7276e6a9268ff33aa3356d8b73e8aee9296ddee5beb6916350ca14ca8c994fd1e165e5b3d3d012d1adca506
SSDEEP

192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Vazi6WF8qa1Dojjgi:mqaCF31cix+Dc4zjaazyFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.106.93.26:80/FdHk

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

Targets

- Target
  
  9481f8a02f0740b56d711b64cdbf841384954394ad2a8f6dd3c763c5e85ab56b
- Size
  
  19KB
- MD5
  
  f6bee457532a7b9b896e32b50c9923fb
- SHA1
  
  fc6b4ceee341615d2732d2470edf3ea9d2749b06
- SHA256
  
  9481f8a02f0740b56d711b64cdbf841384954394ad2a8f6dd3c763c5e85ab56b
- SHA512
  
  cf80322b35493d69410f5b635f1ff694eaa2f69fb7276e6a9268ff33aa3356d8b73e8aee9296ddee5beb6916350ca14ca8c994fd1e165e5b3d3d012d1adca506
- SSDEEP
  
  192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Vazi6WF8qa1Dojjgi:mqaCF31cix+Dc4zjaazyFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan