cobaltstrike | ed86adcb8be5453511d2ea6f0c467fc151e2ee0e58f827c0c862175a52f09757 | Triage

Sharing

General

Target

ed86adcb8be5453511d2ea6f0c467fc151e2ee0e58f827c0c862175a52f09757
Size

19KB
Sample

240528-1lr8cade6x
MD5

cc280ce7f757bbde4eb21ad130daa206
SHA1

59e6f1cfb2064961e19e0cc6e93771d5862e2583
SHA256

ed86adcb8be5453511d2ea6f0c467fc151e2ee0e58f827c0c862175a52f09757
SHA512

5001f2cfc82e5e8f124ba8b5d159b112c967fceecac1c100b8bcb32adad95087a4bd0bcba933a656fcaf1f29ab560cda0dbac762b85c25b2f3d42fbfa3f7a6cf
SSDEEP

192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uXndQWF8qzw7UrEsJUBPf:aqaCF31cix+Dc4zjdzFFp/UBPf

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.43.31.185:8000/n2Ex

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  ed86adcb8be5453511d2ea6f0c467fc151e2ee0e58f827c0c862175a52f09757
- Size
  
  19KB
- MD5
  
  cc280ce7f757bbde4eb21ad130daa206
- SHA1
  
  59e6f1cfb2064961e19e0cc6e93771d5862e2583
- SHA256
  
  ed86adcb8be5453511d2ea6f0c467fc151e2ee0e58f827c0c862175a52f09757
- SHA512
  
  5001f2cfc82e5e8f124ba8b5d159b112c967fceecac1c100b8bcb32adad95087a4bd0bcba933a656fcaf1f29ab560cda0dbac762b85c25b2f3d42fbfa3f7a6cf
- SSDEEP
  
  192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2uXndQWF8qzw7UrEsJUBPf:aqaCF31cix+Dc4zjdzFFp/UBPf
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan