cobaltstrike | 4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c | Triage

Sharing

General

Target

4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c
Size

4.0MB
Sample

240425-vs4basch6y
MD5

993c9c40bb73eb1808c482c9603dd58a
SHA1

53642dc2d17fceec67be0e62fadab63ca6c53c92
SHA256

4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c
SHA512

1816f26a52353c2c76fdf2237ad10d441f3b862606e0b09273b8bca9be814bd52438d8c4da604662bec117eb1967393870b9fb279d73b6cb404552c1d1731377
SSDEEP

49152:G1hHDJgIQHa9KGXsvyIj05EUklj68OLgghX409o/0dNAfh1LKgdrDFnrvQA:SOnysvIElRb9Z09o/8Mh5KgdfFr

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.111.128:7777/JyYA

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Targets

- Target
  
  4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c
- Size
  
  4.0MB
- MD5
  
  993c9c40bb73eb1808c482c9603dd58a
- SHA1
  
  53642dc2d17fceec67be0e62fadab63ca6c53c92
- SHA256
  
  4c99e88c1ef6fad4f610eb77c534ccf4689de995ea227d9f41af0da1fdf9d54c
- SHA512
  
  1816f26a52353c2c76fdf2237ad10d441f3b862606e0b09273b8bca9be814bd52438d8c4da604662bec117eb1967393870b9fb279d73b6cb404552c1d1731377
- SSDEEP
  
  49152:G1hHDJgIQHa9KGXsvyIj05EUklj68OLgghX409o/0dNAfh1LKgdrDFnrvQA:SOnysvIElRb9Z09o/8Mh5KgdfFr
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan