cobaltstrike | fa1547949032160004442a67d7bc2fb00eae3ddcecd5b024ca71bf16fab11130 | Triage

Sharing

General

Target

fa1547949032160004442a67d7bc2fb00eae3ddcecd5b024ca71bf16fab11130.exe
Size

19KB
Sample

240524-ldngvscd8w
MD5

f43f67690f45f6c56ab07828d3e50b58
SHA1

99c074d37b553eaf1c7073a24afca151e0020184
SHA256

fa1547949032160004442a67d7bc2fb00eae3ddcecd5b024ca71bf16fab11130
SHA512

c1bac7cd3847e1d51de1078bd1748788456d8f2a08e9d6b2b6615871920d2393ebbc21a84c0f4d169615bcbf03619101312f10adbb6856511e8c69429d395e1d
SSDEEP

192:XV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dVzM3WF8qa1Dojjgi:BqaCF31cix+Dc4zj+zhFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.217.132:80/9PzZ

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Targets

- Target
  
  fa1547949032160004442a67d7bc2fb00eae3ddcecd5b024ca71bf16fab11130.exe
- Size
  
  19KB
- MD5
  
  f43f67690f45f6c56ab07828d3e50b58
- SHA1
  
  99c074d37b553eaf1c7073a24afca151e0020184
- SHA256
  
  fa1547949032160004442a67d7bc2fb00eae3ddcecd5b024ca71bf16fab11130
- SHA512
  
  c1bac7cd3847e1d51de1078bd1748788456d8f2a08e9d6b2b6615871920d2393ebbc21a84c0f4d169615bcbf03619101312f10adbb6856511e8c69429d395e1d
- SSDEEP
  
  192:XV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dVzM3WF8qa1Dojjgi:BqaCF31cix+Dc4zj+zhFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan