cobaltstrike | deb9971765f4382a53671193753ce3030d45d4e398875d677e66574f616aac40 | Triage

Sharing

General

Target

acc.exe
Size

17KB
Sample

240521-ezch6ahe4v
MD5

cab708fcf7a0b66f237e687f84b78e4d
SHA1

e6240dc4814ca2fd4e851dedbbb833feed5457c7
SHA256

deb9971765f4382a53671193753ce3030d45d4e398875d677e66574f616aac40
SHA512

1d48f2fb6f9f11235e557a50be7c25b59d5776ba1bcdf0a0006220f33cd94243e175ba2ff422db89af198e99224ad11f0cd6f78164e36ad60301ea2374e09624
SSDEEP

192:yDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4YxB96BUbOj6kxiY:yDMAoKz6WtKEj7aBDi9xj6bAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://206.188.197.218:80/rc9O

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)

Targets

- Target
  
  acc.exe
- Size
  
  17KB
- MD5
  
  cab708fcf7a0b66f237e687f84b78e4d
- SHA1
  
  e6240dc4814ca2fd4e851dedbbb833feed5457c7
- SHA256
  
  deb9971765f4382a53671193753ce3030d45d4e398875d677e66574f616aac40
- SHA512
  
  1d48f2fb6f9f11235e557a50be7c25b59d5776ba1bcdf0a0006220f33cd94243e175ba2ff422db89af198e99224ad11f0cd6f78164e36ad60301ea2374e09624
- SSDEEP
  
  192:yDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4YxB96BUbOj6kxiY:yDMAoKz6WtKEj7aBDi9xj6bAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan