cobaltstrike | 2ea0cd6f525e92d40d76bd00a0798277c6eb99766bf2de279fe558ae82209a77 | Triage

Sharing

General

Target

2ea0cd6f525e92d40d76bd00a0798277c6eb99766bf2de279fe558ae82209a77
Size

1.4MB
Sample

240519-mfczksea6z
MD5

9cf069b1dbac58c73a804bed79b5a543
SHA1

19b48846595ac9440e0d5549219009e5c455ca27
SHA256

2ea0cd6f525e92d40d76bd00a0798277c6eb99766bf2de279fe558ae82209a77
SHA512

b00f5aa3183fcb5b982d7616f999716fa463ad14e8566a5841f7cee1eab311a8b11f0cc3a2bfbafb10bf188e16580162ce3e0ab0703ab95c81ef7bdbef064794
SSDEEP

24576:2bGa2J0QzTgkWAZw67VqxlmJbd5btc2d:232J07DuSlmF75cu

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://18.182.54.75:1212/Iex7

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LBBROWSER)

Targets

- Target
  
  2ea0cd6f525e92d40d76bd00a0798277c6eb99766bf2de279fe558ae82209a77
- Size
  
  1.4MB
- MD5
  
  9cf069b1dbac58c73a804bed79b5a543
- SHA1
  
  19b48846595ac9440e0d5549219009e5c455ca27
- SHA256
  
  2ea0cd6f525e92d40d76bd00a0798277c6eb99766bf2de279fe558ae82209a77
- SHA512
  
  b00f5aa3183fcb5b982d7616f999716fa463ad14e8566a5841f7cee1eab311a8b11f0cc3a2bfbafb10bf188e16580162ce3e0ab0703ab95c81ef7bdbef064794
- SSDEEP
  
  24576:2bGa2J0QzTgkWAZw67VqxlmJbd5btc2d:232J07DuSlmF75cu
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan