cobaltstrike | 1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c | Triage

Sharing

General

Target

1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c
Size

19KB
Sample

240426-me1n9aed4t
MD5

0f1f71a02c33abee970683e14b1f1a15
SHA1

47a5fc8e800ac7b5d69165e99a227e2cc8a486cc
SHA256

1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c
SHA512

7636f66c416746012d74fb8b5d6e2ec97059ba88b3d9eb2f0f50c007e7b8b4ef7a014c03258c21b4cc6bd224aa75fcd67b145a7d28c279fb9b8afdbdbd714e73
SSDEEP

192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZP3sJzdRYSWF8qa1Dojjgi:PqaCF31cix+Dc4zjOP3sd+FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.112:80/vi9E

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Targets

- Target
  
  1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c
- Size
  
  19KB
- MD5
  
  0f1f71a02c33abee970683e14b1f1a15
- SHA1
  
  47a5fc8e800ac7b5d69165e99a227e2cc8a486cc
- SHA256
  
  1c902d75b20df94667e7f37cab6b232e1e1027994730511326f6e6e851caac7c
- SHA512
  
  7636f66c416746012d74fb8b5d6e2ec97059ba88b3d9eb2f0f50c007e7b8b4ef7a014c03258c21b4cc6bd224aa75fcd67b145a7d28c279fb9b8afdbdbd714e73
- SSDEEP
  
  192:dV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZP3sJzdRYSWF8qa1Dojjgi:PqaCF31cix+Dc4zjOP3sd+FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan