cobaltstrike | a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1 | Triage

Sharing

General

Target

a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1
Size

1.4MB
Sample

240523-qkfstach79
MD5

e0aab13d8d2143ebff66a5acbcabdb02
SHA1

5b57362a3f766a55b6e3eafe2bf35061876d9bee
SHA256

a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1
SHA512

e9378ded057f633273dfa59579328e7079352caa8c1f2b86b814b8b46e94889a17e2869f48c6b9f3e065bb4d792d5225f7e422f014b6f4fee1ead099a028fc66
SSDEEP

12288:98NgAn7lJtv7K9Yi/QNm5+ojBqB+GiTK25/j15wHT+MS6cxi+oV0c+Eroo3ujWWE:98NjnZJ9e9Yi/T5+oTvjQ6M6j3JWVrT

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.36.105.186:443/detect/applet/GZA1UH6C9W9R

Attributes

user_agent
Accept: application/json, image/*, application/xml Accept-Language: es-gt Accept-Encoding: *, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36

Targets

- Target
  
  a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1
- Size
  
  1.4MB
- MD5
  
  e0aab13d8d2143ebff66a5acbcabdb02
- SHA1
  
  5b57362a3f766a55b6e3eafe2bf35061876d9bee
- SHA256
  
  a8d417116b9355204c43ca72d4852930c10ed6eab3363d80dabc424c0c7409e1
- SHA512
  
  e9378ded057f633273dfa59579328e7079352caa8c1f2b86b814b8b46e94889a17e2869f48c6b9f3e065bb4d792d5225f7e422f014b6f4fee1ead099a028fc66
- SSDEEP
  
  12288:98NgAn7lJtv7K9Yi/QNm5+ojBqB+GiTK25/j15wHT+MS6cxi+oV0c+Eroo3ujWWE:98NjnZJ9e9Yi/T5+oTvjQ6M6j3JWVrT
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan