cobaltstrike | d60d32a4290f2f62cba205c627f9d0b991edc82869b54776677eca2a8ae5f282 | Triage

Sharing

General

Target

d60d32a4290f2f62cba205c627f9d0b991edc82869b54776677eca2a8ae5f282
Size

1.4MB
Sample

240523-qknhnacg5y
MD5

63011954af92c6d5e778e160458536f3
SHA1

acbaab97d48d5bcab8646af4bd071ef1fce70422
SHA256

d60d32a4290f2f62cba205c627f9d0b991edc82869b54776677eca2a8ae5f282
SHA512

cc9cdffab11cd78bdd0cde409b118105d088742912294799feec3df84af998710d8ca07bd732cba99c91b7e944256670c471eed3b1ace0b821ef8b578527bfa6
SSDEEP

24576:XPfkSPpPYSCzD7Gj+zttq2M6j3JDVDHk:nfP1YSCz3Gj92r

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.36.105.186:443/RdZM

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; Touch)

Targets

- Target
  
  d60d32a4290f2f62cba205c627f9d0b991edc82869b54776677eca2a8ae5f282
- Size
  
  1.4MB
- MD5
  
  63011954af92c6d5e778e160458536f3
- SHA1
  
  acbaab97d48d5bcab8646af4bd071ef1fce70422
- SHA256
  
  d60d32a4290f2f62cba205c627f9d0b991edc82869b54776677eca2a8ae5f282
- SHA512
  
  cc9cdffab11cd78bdd0cde409b118105d088742912294799feec3df84af998710d8ca07bd732cba99c91b7e944256670c471eed3b1ace0b821ef8b578527bfa6
- SSDEEP
  
  24576:XPfkSPpPYSCzD7Gj+zttq2M6j3JDVDHk:nfP1YSCz3Gj92r
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan