cobaltstrike | a846694b911259f1b68150cdd9366fb853f2779132e8181fe3df26cf8a907e90 | Triage

Sharing

General

Target

91c14b1fd5077650639674f97de306e0_NeikiAnalytics.exe
Size

17KB
Sample

240519-harhkaef28
MD5

91c14b1fd5077650639674f97de306e0
SHA1

84b2cfbef58014ccfb2a58e864b036dd2051e8a2
SHA256

a846694b911259f1b68150cdd9366fb853f2779132e8181fe3df26cf8a907e90
SHA512

c530fcd16326342ec913a72b4995cc0f4645a7d9dddb6b74a9a8abd950060eddbcfa58a3b84224849b1091894148bb6eee7090498d45cf34dcd863fc6cf4b137
SSDEEP

192:WDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4afOUOl+BUbOj6kxiY:WDMAoKz6WtKEj7aBDiDOUq+bAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://wuluxo.com:443/JZJo

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAM2)

Targets

- Target
  
  91c14b1fd5077650639674f97de306e0_NeikiAnalytics.exe
- Size
  
  17KB
- MD5
  
  91c14b1fd5077650639674f97de306e0
- SHA1
  
  84b2cfbef58014ccfb2a58e864b036dd2051e8a2
- SHA256
  
  a846694b911259f1b68150cdd9366fb853f2779132e8181fe3df26cf8a907e90
- SHA512
  
  c530fcd16326342ec913a72b4995cc0f4645a7d9dddb6b74a9a8abd950060eddbcfa58a3b84224849b1091894148bb6eee7090498d45cf34dcd863fc6cf4b137
- SSDEEP
  
  192:WDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4afOUOl+BUbOj6kxiY:WDMAoKz6WtKEj7aBDiDOUq+bAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan