cobaltstrike | 6bf4bba0e88884b274b28ef8f1a59d4b97796aa0082197becd4f6bc2e546260c | Triage

Sharing

General

Target

6bf4bba0e88884b274b28ef8f1a59d4b97796aa0082197becd4f6bc2e546260c.exe
Size

36KB
Sample

240430-htzchsfd7x
MD5

3817edca92025ebe8512516b7dd77e80
SHA1

d53a16490b490386af95b9124685ccbc6ec247b6
SHA256

6bf4bba0e88884b274b28ef8f1a59d4b97796aa0082197becd4f6bc2e546260c
SHA512

ff26a2d5fcc4a4d67f154b67f17730287a2ab01730a652aa36aae96b0be6bef58d5118c68b61a7600058a526129a285bbf8600898b5411eaa2b98b4a10f301dc
SSDEEP

768:8Fw+H/natWvv3yaDivS3991Eadu/8sm3qGHUO5+WiY:1+fnIWvv3sUjvdu/8cO5g

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.243.59.237:80/yi3H

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)

Targets

- Target
  
  6bf4bba0e88884b274b28ef8f1a59d4b97796aa0082197becd4f6bc2e546260c.exe
- Size
  
  36KB
- MD5
  
  3817edca92025ebe8512516b7dd77e80
- SHA1
  
  d53a16490b490386af95b9124685ccbc6ec247b6
- SHA256
  
  6bf4bba0e88884b274b28ef8f1a59d4b97796aa0082197becd4f6bc2e546260c
- SHA512
  
  ff26a2d5fcc4a4d67f154b67f17730287a2ab01730a652aa36aae96b0be6bef58d5118c68b61a7600058a526129a285bbf8600898b5411eaa2b98b4a10f301dc
- SSDEEP
  
  768:8Fw+H/natWvv3yaDivS3991Eadu/8sm3qGHUO5+WiY:1+fnIWvv3sUjvdu/8cO5g
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan