cobaltstrike | 97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831 | Triage

Sharing

General

Target

97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831
Size

19KB
Sample

240524-t5y2nscb6w
MD5

96cedbf9d4d4698027c8a4aa1a950278
SHA1

44369e28de8b47681d76d9e0e6c84a54ba11f0fb
SHA256

97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831
SHA512

63faa10bf018eb6bc4c2a23ea73ce0c8c9e95e6eec9efee09b1ebfdf1b4deb4102a7dc0f1ba88ebbdc12f6bb1faa83727fe8dd7290f530eb2cacd2a398f1198f
SSDEEP

192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2q9YTwWF8qa1Dojjgi:uqaCF31cix+Dc4zjp90FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.8.128:8080/lJv1

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)

Targets

- Target
  
  97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831
- Size
  
  19KB
- MD5
  
  96cedbf9d4d4698027c8a4aa1a950278
- SHA1
  
  44369e28de8b47681d76d9e0e6c84a54ba11f0fb
- SHA256
  
  97b6401e12ac8a86b342770ea0bdd89fda470517776419a890773b46facbe831
- SHA512
  
  63faa10bf018eb6bc4c2a23ea73ce0c8c9e95e6eec9efee09b1ebfdf1b4deb4102a7dc0f1ba88ebbdc12f6bb1faa83727fe8dd7290f530eb2cacd2a398f1198f
- SSDEEP
  
  192:MV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2q9YTwWF8qa1Dojjgi:uqaCF31cix+Dc4zjp90FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan