cobaltstrike | 90292aa0da2d527f67757d9ceaabeb554445b93de98bd2cdf36f1436f1050094 | Triage

Sharing

General

Target

oracle.exe
Size

19KB
Sample

240522-w3yz1abh8v
MD5

6e92349a28f041ca81ad5020ab80f04a
SHA1

912906275cfdb89d7846f926757673826143bc5e
SHA256

90292aa0da2d527f67757d9ceaabeb554445b93de98bd2cdf36f1436f1050094
SHA512

8355cf345c234a0571960dc1fc60587e2a3fbd3cfffe2554b8ec424003e3a1dd4a15164b97113c227114a308250cd69e091977a12ffac7afb8801cfe72ee0d4e
SSDEEP

192:iV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ufJGyXXWF8qa1Dojjgi:sqaCF31cix+Dc4zjLf4yWFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://110.42.189.52:81/Il4t

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Touch)

Targets

- Target
  
  oracle.exe
- Size
  
  19KB
- MD5
  
  6e92349a28f041ca81ad5020ab80f04a
- SHA1
  
  912906275cfdb89d7846f926757673826143bc5e
- SHA256
  
  90292aa0da2d527f67757d9ceaabeb554445b93de98bd2cdf36f1436f1050094
- SHA512
  
  8355cf345c234a0571960dc1fc60587e2a3fbd3cfffe2554b8ec424003e3a1dd4a15164b97113c227114a308250cd69e091977a12ffac7afb8801cfe72ee0d4e
- SSDEEP
  
  192:iV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ufJGyXXWF8qa1Dojjgi:sqaCF31cix+Dc4zjLf4yWFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan