cobaltstrike | ec32d192d5b2b04f2941899d14d58c1a70a3da2cae6c7ac6575d7da040434928 | Triage

Sharing

General

Target

ec32d192d5b2b04f2941899d14d58c1a70a3da2cae6c7ac6575d7da040434928
Size

1.4MB
Sample

240907-1d2f2syfkf
MD5

88f38fa813f9839b5bb5527d9f66b5c9
SHA1

a95e157860dc31e7fec7b200be9f2a8503a66654
SHA256

ec32d192d5b2b04f2941899d14d58c1a70a3da2cae6c7ac6575d7da040434928
SHA512

e9a7f79383944c12404fc7c2435fd9a695a1a6fab9f62e957473f73a493f3a8afb81e540f57d88087a92aab0477dbd4bc2901a1c23df5adb085c56fda15146e7
SSDEEP

24576:ZTYk0nH+bXtRP87LAi8VIMVuviySnHLIE5Oqs1gN3Sor:ik0HYQeVIQ4iySHLXz3Sor

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://cstest2.399339.xyz:80/wm2G

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1) Host: cstest2.399339.xyz

Targets

- Target
  
  ec32d192d5b2b04f2941899d14d58c1a70a3da2cae6c7ac6575d7da040434928
- Size
  
  1.4MB
- MD5
  
  88f38fa813f9839b5bb5527d9f66b5c9
- SHA1
  
  a95e157860dc31e7fec7b200be9f2a8503a66654
- SHA256
  
  ec32d192d5b2b04f2941899d14d58c1a70a3da2cae6c7ac6575d7da040434928
- SHA512
  
  e9a7f79383944c12404fc7c2435fd9a695a1a6fab9f62e957473f73a493f3a8afb81e540f57d88087a92aab0477dbd4bc2901a1c23df5adb085c56fda15146e7
- SSDEEP
  
  24576:ZTYk0nH+bXtRP87LAi8VIMVuviySnHLIE5Oqs1gN3Sor:ik0HYQeVIQ4iySHLXz3Sor
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan