cobaltstrike | 5140669d5ce0a812ace54e5896b723eb764de7d56ae5a48ca7896abb4a9d92f4 | Triage

Sharing

General

Target

5140669d5ce0a812ace54e5896b723eb764de7d56ae5a48ca7896abb4a9d92f4
Size

19KB
Sample

240425-vtj9tada69
MD5

ac4b7dcaff4069283f91287d73e03151
SHA1

61c8b4c715d9c6ee7dfd4af2bd935004e636da19
SHA256

5140669d5ce0a812ace54e5896b723eb764de7d56ae5a48ca7896abb4a9d92f4
SHA512

6d3a0c2f2de6ebf61699797e7d2642fac96e730de933c83e4912e61e74071c545624bd22f175e4a09d5933d0375d04e5f139dca8d9d2877d9dec550c8f408b5a
SSDEEP

192:BV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2s4AhYWF8qa1Dojjgi:TqaCF31cix+Dc4zjuAhtFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.188.139:80/iMRU

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP02)

Targets

- Target
  
  5140669d5ce0a812ace54e5896b723eb764de7d56ae5a48ca7896abb4a9d92f4
- Size
  
  19KB
- MD5
  
  ac4b7dcaff4069283f91287d73e03151
- SHA1
  
  61c8b4c715d9c6ee7dfd4af2bd935004e636da19
- SHA256
  
  5140669d5ce0a812ace54e5896b723eb764de7d56ae5a48ca7896abb4a9d92f4
- SHA512
  
  6d3a0c2f2de6ebf61699797e7d2642fac96e730de933c83e4912e61e74071c545624bd22f175e4a09d5933d0375d04e5f139dca8d9d2877d9dec550c8f408b5a
- SSDEEP
  
  192:BV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2s4AhYWF8qa1Dojjgi:TqaCF31cix+Dc4zjuAhtFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan