cobaltstrike | 193798b030cfd191b2e6410992d7451c8e93e7d4fcef0d5ee86aca6187937717 | Triage

Sharing

General

Target

193798b030cfd191b2e6410992d7451c8e93e7d4fcef0d5ee86aca6187937717
Size

19KB
Sample

240425-smpvlsbh92
MD5

79c4c237755b2e2d7491c1664cbaf869
SHA1

43cf53ce440e2473f27fd2e15b60229b75786368
SHA256

193798b030cfd191b2e6410992d7451c8e93e7d4fcef0d5ee86aca6187937717
SHA512

a0f6331089efa7b08541fc747eec3c10ea85e091bd084281d4904e0d15979a5d383dbcae9f44dbdb87696c42e3af20ebe1910e42540e4f27f01dd4309098e1c2
SSDEEP

192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Oc61WF8qa1Dojjgi:PqaCF31cix+Dc4zjXc64FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://120.24.173.178:8023/RhTO

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MASAJS)

Targets

- Target
  
  193798b030cfd191b2e6410992d7451c8e93e7d4fcef0d5ee86aca6187937717
- Size
  
  19KB
- MD5
  
  79c4c237755b2e2d7491c1664cbaf869
- SHA1
  
  43cf53ce440e2473f27fd2e15b60229b75786368
- SHA256
  
  193798b030cfd191b2e6410992d7451c8e93e7d4fcef0d5ee86aca6187937717
- SHA512
  
  a0f6331089efa7b08541fc747eec3c10ea85e091bd084281d4904e0d15979a5d383dbcae9f44dbdb87696c42e3af20ebe1910e42540e4f27f01dd4309098e1c2
- SSDEEP
  
  192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Oc61WF8qa1Dojjgi:PqaCF31cix+Dc4zjXc64FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan