cobaltstrike | 1cd0805b2e27783b5427189d43c5962a22c4ca2f8de17c1fc290d7822d8aca64 | Triage

Sharing

General

Target

1cd0805b2e27783b5427189d43c5962a22c4ca2f8de17c1fc290d7822d8aca64
Size

19KB
Sample

240719-rbrdmavcpn
MD5

540c8cdbac33a97f303b65bff4206b3b
SHA1

22f134262715cf797104c6737f09ad9ed95e92dc
SHA256

1cd0805b2e27783b5427189d43c5962a22c4ca2f8de17c1fc290d7822d8aca64
SHA512

fbafb30a38eb8f94d225fc8b5f6effe623814ee902f5af40a0fdd5c747c08e1817e31a0eeb666b8adad4b833c2323332f22df8155f63fcd8e1da8acb421f7e72
SSDEEP

192:kV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LvvUkWF8qa1Dojjgi:WqaCF31cix+Dc4zjevvURFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.112.195:5555/WoSD

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Targets

- Target
  
  1cd0805b2e27783b5427189d43c5962a22c4ca2f8de17c1fc290d7822d8aca64
- Size
  
  19KB
- MD5
  
  540c8cdbac33a97f303b65bff4206b3b
- SHA1
  
  22f134262715cf797104c6737f09ad9ed95e92dc
- SHA256
  
  1cd0805b2e27783b5427189d43c5962a22c4ca2f8de17c1fc290d7822d8aca64
- SHA512
  
  fbafb30a38eb8f94d225fc8b5f6effe623814ee902f5af40a0fdd5c747c08e1817e31a0eeb666b8adad4b833c2323332f22df8155f63fcd8e1da8acb421f7e72
- SSDEEP
  
  192:kV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2LvvUkWF8qa1Dojjgi:WqaCF31cix+Dc4zjevvURFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan