cobaltstrike | 80bf4c915ee23b7800f8f09e16a5687d85b441b32e32fb863dc9dddb84e3ac74 | Triage

Resubmissions

05-05-2024 02:10

240505-clr1ksbd8x 4

04-05-2024 23:21

240504-3bycqaeh9z 10

Sharing

General

Target

80bf4c915ee23b7800f8f09e16a5687d85b441b32e32fb863dc9dddb84e3ac74
Size

46KB
Sample

240504-3bycqaeh9z
MD5

3362335b8eb7d96f17ffad81f82585cf
SHA1

74e425010ba7021e7dfc8bd558e36e3a8bd8ac00
SHA256

80bf4c915ee23b7800f8f09e16a5687d85b441b32e32fb863dc9dddb84e3ac74
SHA512

4627b72fda0c642c88c2e3b68e41c5a92cbc1724ae0c23149681e175fcf73ee7d04bcc540f62e632a814cdefbf3539cdd710f60c5d6467537da221865cba4256
SSDEEP

768:gRmAA6uESG8VrqRXNOa4Mu7tHZUmso6+sIgL4I:Yc1vzVrKQa3ucessI

Score

10^/10

cobaltstrike metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://103.145.107.83:88/vue86.min.js

Attributes

headers User-Agent: Mozilla/5.0 (Windows NT 6.2; rv:21.0) Gecko/20130326 Firefox/21.0

Targets

- Target
  
  80bf4c915ee23b7800f8f09e16a5687d85b441b32e32fb863dc9dddb84e3ac74
- Size
  
  46KB
- MD5
  
  3362335b8eb7d96f17ffad81f82585cf
- SHA1
  
  74e425010ba7021e7dfc8bd558e36e3a8bd8ac00
- SHA256
  
  80bf4c915ee23b7800f8f09e16a5687d85b441b32e32fb863dc9dddb84e3ac74
- SHA512
  
  4627b72fda0c642c88c2e3b68e41c5a92cbc1724ae0c23149681e175fcf73ee7d04bcc540f62e632a814cdefbf3539cdd710f60c5d6467537da221865cba4256
- SSDEEP
  
  768:gRmAA6uESG8VrqRXNOa4Mu7tHZUmso6+sIgL4I:Yc1vzVrKQa3ucessI
Score

10^/10

cobaltstrike metasploit backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikemetasploitbackdoortrojan

behavioral2

cobaltstrikemetasploitbackdoortrojan