cobaltstrike | 344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063 | Triage

Sharing

General

Target

344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063
Size

19KB
Sample

240426-l93awseb51
MD5

3e83ad7d87ed23e78f8ae1caf72995e4
SHA1

eed9f54422acdceedc91b7debe0c4666752be881
SHA256

344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063
SHA512

8b9e8a52534a88389b227cbaf6d01ac5071cfb7cee5385d9cea3776ec14cfd90713e8b12d64a0ef818ba6359e1cd17985f6a9117e3f2daa76b9fd547d7792c84
SSDEEP

192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2H5zyUQWbWF8qa1Dojjgi:uqaCF31cix+Dc4zjKPQWiFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.50.124:80/uG7j

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Targets

- Target
  
  344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063
- Size
  
  19KB
- MD5
  
  3e83ad7d87ed23e78f8ae1caf72995e4
- SHA1
  
  eed9f54422acdceedc91b7debe0c4666752be881
- SHA256
  
  344236d8e71dd85512e2f40781b38b2ab19ee44e7d9a331e63a736ac3a14f063
- SHA512
  
  8b9e8a52534a88389b227cbaf6d01ac5071cfb7cee5385d9cea3776ec14cfd90713e8b12d64a0ef818ba6359e1cd17985f6a9117e3f2daa76b9fd547d7792c84
- SSDEEP
  
  192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2H5zyUQWbWF8qa1Dojjgi:uqaCF31cix+Dc4zjKPQWiFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan