cobaltstrike | 0b5eaaa9f9151202dab6cc0c9700101c8f1b88f74e69437d7e12697f2701d371 | Triage

Sharing

General

Target

0b5eaaa9f9151202dab6cc0c9700101c8f1b88f74e69437d7e12697f2701d371
Size

19KB
Sample

240426-l93awseb6t
MD5

77bc18584b5f7be889505b17ca1a5bf5
SHA1

ef7c6037d3570ce1de18021b084a3f51922165a5
SHA256

0b5eaaa9f9151202dab6cc0c9700101c8f1b88f74e69437d7e12697f2701d371
SHA512

149ad53089155138fda958e61b4c558aaf573e098be4bf1f7a7279f34ab511aecc701798813d7ffdd072ef6dd2d6d5da63d7f5ad7334ca802fdb5750f3e23206
SSDEEP

192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FFBSj6XbmqHWF8qa1Dojjgi:qqaCF31cix+Dc4zjwvPGFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.17.133:4523/nh7P

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.4.1263.203; Windows NT 6.1; WOW64; Trident/5.0)

Targets

- Target
  
  0b5eaaa9f9151202dab6cc0c9700101c8f1b88f74e69437d7e12697f2701d371
- Size
  
  19KB
- MD5
  
  77bc18584b5f7be889505b17ca1a5bf5
- SHA1
  
  ef7c6037d3570ce1de18021b084a3f51922165a5
- SHA256
  
  0b5eaaa9f9151202dab6cc0c9700101c8f1b88f74e69437d7e12697f2701d371
- SHA512
  
  149ad53089155138fda958e61b4c558aaf573e098be4bf1f7a7279f34ab511aecc701798813d7ffdd072ef6dd2d6d5da63d7f5ad7334ca802fdb5750f3e23206
- SSDEEP
  
  192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FFBSj6XbmqHWF8qa1Dojjgi:qqaCF31cix+Dc4zjwvPGFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan