cobaltstrike | 6d1c00d10483f0fc2d9f7f243f9940a7ea1f7a098fbc3cc34c5a2a848683d168 | Triage

Sharing

General

Target

55a52fe521788c0f78afef63407c3090_NeikiAnalytics.exe
Size

17KB
Sample

240522-3axd2ach33
MD5

55a52fe521788c0f78afef63407c3090
SHA1

60a3f4332e743cb289bf15062f03a0a6b5b45405
SHA256

6d1c00d10483f0fc2d9f7f243f9940a7ea1f7a098fbc3cc34c5a2a848683d168
SHA512

c1ee63e86f65abf6304e352f64368a5f7cea98ab3f5577a386522f3c57f8ee2dd35dfa8e33ed594512a89a2c84fcfaafb186373e07eca7c2799e33808b243aab
SSDEEP

192:cDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ubXFEUBUbOj6kxiY:cDMAoKz6WtKEj7aBDi/bXFEUbAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.159.189:88/6Jxe

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Targets

- Target
  
  55a52fe521788c0f78afef63407c3090_NeikiAnalytics.exe
- Size
  
  17KB
- MD5
  
  55a52fe521788c0f78afef63407c3090
- SHA1
  
  60a3f4332e743cb289bf15062f03a0a6b5b45405
- SHA256
  
  6d1c00d10483f0fc2d9f7f243f9940a7ea1f7a098fbc3cc34c5a2a848683d168
- SHA512
  
  c1ee63e86f65abf6304e352f64368a5f7cea98ab3f5577a386522f3c57f8ee2dd35dfa8e33ed594512a89a2c84fcfaafb186373e07eca7c2799e33808b243aab
- SSDEEP
  
  192:cDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4ubXFEUBUbOj6kxiY:cDMAoKz6WtKEj7aBDi/bXFEUbAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan