cobaltstrike | de06d60ce9ad7598ca4ebe769730a1897cf3769b9c94d3e02fc59b2fdafb6103 | Triage

Sharing

General

Target

de06d60ce9ad7598ca4ebe769730a1897cf3769b9c94d3e02fc59b2fdafb6103
Size

1.0MB
Sample

240612-khy9gswdjb
MD5

6e8212b6ec84bb7615935c6528361acc
SHA1

0d98df778687b13bd1af999e913b3934d254db03
SHA256

de06d60ce9ad7598ca4ebe769730a1897cf3769b9c94d3e02fc59b2fdafb6103
SHA512

002379f04cdb62fed8b295cb42798f2e4d0a4b96777165df09d2a1d84d11a63ad97a4044daf2cd6c8a21a75634ab6250b6757e147d21248e51a62398a952dc5f
SSDEEP

12288:2D2UvFl8d0sknYHrnjiMzPfGuU93PK5S4/4+2V0T+ES+o3xjn7LVLD:2D5dl0eYHrpHGhZPFc1U7L1D

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.31.33:980/JmPV

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET4.0E)

Targets

- Target
  
  de06d60ce9ad7598ca4ebe769730a1897cf3769b9c94d3e02fc59b2fdafb6103
- Size
  
  1.0MB
- MD5
  
  6e8212b6ec84bb7615935c6528361acc
- SHA1
  
  0d98df778687b13bd1af999e913b3934d254db03
- SHA256
  
  de06d60ce9ad7598ca4ebe769730a1897cf3769b9c94d3e02fc59b2fdafb6103
- SHA512
  
  002379f04cdb62fed8b295cb42798f2e4d0a4b96777165df09d2a1d84d11a63ad97a4044daf2cd6c8a21a75634ab6250b6757e147d21248e51a62398a952dc5f
- SSDEEP
  
  12288:2D2UvFl8d0sknYHrnjiMzPfGuU93PK5S4/4+2V0T+ES+o3xjn7LVLD:2D5dl0eYHrpHGhZPFc1U7L1D
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan