cobaltstrike | ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79 | Triage

Sharing

General

Target

ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79
Size

19KB
Sample

240907-h9qejssbqd
MD5

aa92691b3e17ac723712a6ffe7aab057
SHA1

71f2e159a98c2c7d1714aea559cb483169d3495d
SHA256

ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79
SHA512

9991b1be1097964891f0d9cfb3ae525723552bb59a4211446cf12ea22fe5bed8d8a3179678b98916474e7fe75d03d7d7ad4a35f04071e74079553b3b55e38ff2
SSDEEP

192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ps1HAxWF8qa1Dojjgi:CqaCF31cix+Dc4zjysaMFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://111.229.204.49:1234/6dtO

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Targets

- Target
  
  ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79
- Size
  
  19KB
- MD5
  
  aa92691b3e17ac723712a6ffe7aab057
- SHA1
  
  71f2e159a98c2c7d1714aea559cb483169d3495d
- SHA256
  
  ebafac6ce15adcd8bd6ff191dcb9aa20370f9bcfe72b1355a6f3c7dd86b9bd79
- SHA512
  
  9991b1be1097964891f0d9cfb3ae525723552bb59a4211446cf12ea22fe5bed8d8a3179678b98916474e7fe75d03d7d7ad4a35f04071e74079553b3b55e38ff2
- SSDEEP
  
  192:gV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ps1HAxWF8qa1Dojjgi:CqaCF31cix+Dc4zjysaMFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan