cobaltstrike | b34f6937abca2a118142b2ef99465dc3c330ab3176dd5d011f0cfd7da2a9707e | Triage

Sharing

General

Target

b34f6937abca2a118142b2ef99465dc3c330ab3176dd5d011f0cfd7da2a9707e
Size

1.3MB
Sample

240523-qkpeysch99
MD5

938d86e9bdc12851d17035ce643ca378
SHA1

cb1603a1fe0bb2b1fd28f237060d121904f7f9ae
SHA256

b34f6937abca2a118142b2ef99465dc3c330ab3176dd5d011f0cfd7da2a9707e
SHA512

706469ae7bfa309278a74d00e8cae21819080b81c1f98556c3c47817f3665f5e036140d426d718446f942c937dcd575cdd69c169a9e14c0f66cefd02e99c039c
SSDEEP

12288:SkXKz01FwoX4jICIKG2mJhChwm05UOET6cxR+2V0T+ESTo3uj17ghntXhfF3:Sk/PwoXMmJIOEdCkJ18htR

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.36.105.186:443/detect/applet/GZA1UH6C9W9R

Attributes

user_agent
Accept: application/json, image/*, application/xml Accept-Language: es-gt Accept-Encoding: *, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36

Targets

- Target
  
  b34f6937abca2a118142b2ef99465dc3c330ab3176dd5d011f0cfd7da2a9707e
- Size
  
  1.3MB
- MD5
  
  938d86e9bdc12851d17035ce643ca378
- SHA1
  
  cb1603a1fe0bb2b1fd28f237060d121904f7f9ae
- SHA256
  
  b34f6937abca2a118142b2ef99465dc3c330ab3176dd5d011f0cfd7da2a9707e
- SHA512
  
  706469ae7bfa309278a74d00e8cae21819080b81c1f98556c3c47817f3665f5e036140d426d718446f942c937dcd575cdd69c169a9e14c0f66cefd02e99c039c
- SSDEEP
  
  12288:SkXKz01FwoX4jICIKG2mJhChwm05UOET6cxR+2V0T+ESTo3uj17ghntXhfF3:Sk/PwoXMmJIOEdCkJ18htR
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan