cobaltstrike | 0637c0d118881dc1d6b9d8eafc2c43538447d21fab9eb11fdd8f086e31b1704a | Triage

Sharing

General

Target

0637c0d118881dc1d6b9d8eafc2c43538447d21fab9eb11fdd8f086e31b1704a
Size

19KB
Sample

240427-h4kl4sdf64
MD5

143703a8a3a39e37b06a3312b2e90e0e
SHA1

a85c374a978138d3440b2507a5ee3d0d9067ff68
SHA256

0637c0d118881dc1d6b9d8eafc2c43538447d21fab9eb11fdd8f086e31b1704a
SHA512

1416032bcf614c42ebf525cad8523efb84815dc9e481b76fe18f86df0888900c92728ee35ca8b4cadedf095122d911d86ecba49821ede3f3a5252b939ea6e958
SSDEEP

192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2eWjfOWF8qa1Dojjgi:8qaCF31cix+Dc4zj6j3FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.130.165.254:8001/5lOm

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  0637c0d118881dc1d6b9d8eafc2c43538447d21fab9eb11fdd8f086e31b1704a
- Size
  
  19KB
- MD5
  
  143703a8a3a39e37b06a3312b2e90e0e
- SHA1
  
  a85c374a978138d3440b2507a5ee3d0d9067ff68
- SHA256
  
  0637c0d118881dc1d6b9d8eafc2c43538447d21fab9eb11fdd8f086e31b1704a
- SHA512
  
  1416032bcf614c42ebf525cad8523efb84815dc9e481b76fe18f86df0888900c92728ee35ca8b4cadedf095122d911d86ecba49821ede3f3a5252b939ea6e958
- SSDEEP
  
  192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2eWjfOWF8qa1Dojjgi:8qaCF31cix+Dc4zj6j3FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan