cobaltstrike | 2341ec4946cd551f66302bfe066398bd01b0c7d317443c9f99a0668e0e0f282c | Triage

Sharing

General

Target

2341ec4946cd551f66302bfe066398bd01b0c7d317443c9f99a0668e0e0f282c
Size

19KB
Sample

240428-l91r3add45
MD5

7f110c0a823ece0603b6a0fbfa82eecf
SHA1

6dc27429d817d0ccf923c96d8740ddb14c9330bb
SHA256

2341ec4946cd551f66302bfe066398bd01b0c7d317443c9f99a0668e0e0f282c
SHA512

eca6e5af8bc23459d2b2c942ba0e5f9927df56a6f81297517737c3064768355a9a33279ef3216437727c4919a3afb8457f7336f9ce85ae06bea1a414939ddfec
SSDEEP

192:hV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/21DRMBSAWF8qa1Dojjgi:zqaCF31cix+Dc4zjYnFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://cms.nawwan.xyz:443/api/2

Attributes

user_agent
Host: cms.nawwan.xyz User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

Targets

- Target
  
  2341ec4946cd551f66302bfe066398bd01b0c7d317443c9f99a0668e0e0f282c
- Size
  
  19KB
- MD5
  
  7f110c0a823ece0603b6a0fbfa82eecf
- SHA1
  
  6dc27429d817d0ccf923c96d8740ddb14c9330bb
- SHA256
  
  2341ec4946cd551f66302bfe066398bd01b0c7d317443c9f99a0668e0e0f282c
- SHA512
  
  eca6e5af8bc23459d2b2c942ba0e5f9927df56a6f81297517737c3064768355a9a33279ef3216437727c4919a3afb8457f7336f9ce85ae06bea1a414939ddfec
- SSDEEP
  
  192:hV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/21DRMBSAWF8qa1Dojjgi:zqaCF31cix+Dc4zjYnFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan