cobaltstrike | 2d1c9bfc96550ecf1bcd63579d10b4584751aa9524d6f7b93890c16e4ae4ef2e | Triage

Sharing

General

Target

2d1c9bfc96550ecf1bcd63579d10b4584751aa9524d6f7b93890c16e4ae4ef2e_NeikiAnalytics
Size

205KB
Sample

240521-ljasysge43
MD5

e044a9f7e390d4938c2a75ee47e5c2c0
SHA1

d40ad89b2da809355f80fbfe4898ca24e2516bc6
SHA256

2d1c9bfc96550ecf1bcd63579d10b4584751aa9524d6f7b93890c16e4ae4ef2e
SHA512

8390d4aa48b70f221d71fc4011c9873df6013e24b7370feb549cebe5fea4b56fa4668de9e1250d89d705a1875de60bf225c490124097fb6b427cc3fb7ae88c34
SSDEEP

3072:MLcK4Isks0J8h45RWluooHDq8TKNq28pdAl+:LIU0S45looHDXTKw28cl+

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://:0

Targets

- Target
  
  2d1c9bfc96550ecf1bcd63579d10b4584751aa9524d6f7b93890c16e4ae4ef2e_NeikiAnalytics
- Size
  
  205KB
- MD5
  
  e044a9f7e390d4938c2a75ee47e5c2c0
- SHA1
  
  d40ad89b2da809355f80fbfe4898ca24e2516bc6
- SHA256
  
  2d1c9bfc96550ecf1bcd63579d10b4584751aa9524d6f7b93890c16e4ae4ef2e
- SHA512
  
  8390d4aa48b70f221d71fc4011c9873df6013e24b7370feb549cebe5fea4b56fa4668de9e1250d89d705a1875de60bf225c490124097fb6b427cc3fb7ae88c34
- SSDEEP
  
  3072:MLcK4Isks0J8h45RWluooHDq8TKNq28pdAl+:LIU0S45looHDXTKw28cl+
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2