cobaltstrike | 5ea9019cfea2219c7502379fc52430e32d460cb6ced9783bf11e9af71028bb85 | Triage

Sharing

General

Target

5ea9019cfea2219c7502379fc52430e32d460cb6ced9783bf11e9af71028bb85
Size

19KB
Sample

240612-enty3azhql
MD5

5b44f47c6e2153f440acd737ccd9e2c2
SHA1

1a006dd8c78e1c33bef4c11cbca7920f5619aa9e
SHA256

5ea9019cfea2219c7502379fc52430e32d460cb6ced9783bf11e9af71028bb85
SHA512

0a760b7a0d1b2f530eb3ae02cfb87b005bbb4c8640c5cda909ed7d5dd84ec7560b9c7d93526cd5d4f042b5d64e0572e2f5190bd41bf7d00c76dc10cc4333d110
SSDEEP

192:sWV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FfAjWF8qa1Dojjgi:LqaCF31cix+Dc4zjSoaFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://36.139.9.192:61124/TMQk

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Targets

- Target
  
  5ea9019cfea2219c7502379fc52430e32d460cb6ced9783bf11e9af71028bb85
- Size
  
  19KB
- MD5
  
  5b44f47c6e2153f440acd737ccd9e2c2
- SHA1
  
  1a006dd8c78e1c33bef4c11cbca7920f5619aa9e
- SHA256
  
  5ea9019cfea2219c7502379fc52430e32d460cb6ced9783bf11e9af71028bb85
- SHA512
  
  0a760b7a0d1b2f530eb3ae02cfb87b005bbb4c8640c5cda909ed7d5dd84ec7560b9c7d93526cd5d4f042b5d64e0572e2f5190bd41bf7d00c76dc10cc4333d110
- SSDEEP
  
  192:sWV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FfAjWF8qa1Dojjgi:LqaCF31cix+Dc4zjSoaFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan