cobaltstrike | 06e80eb59c7abda63ec37ee4cf8bae9e89794b7e46d788f36cd6af555284b946 | Triage

Sharing

General

Target

d3a60a1d0cac3375562fe266a04d698f_JaffaCakes118
Size

17KB
Sample

240908-f6fptsyhrm
MD5

d3a60a1d0cac3375562fe266a04d698f
SHA1

bf56d4c5bc8ed8ce753c49e5ad2b8e506304b90f
SHA256

06e80eb59c7abda63ec37ee4cf8bae9e89794b7e46d788f36cd6af555284b946
SHA512

f7eae325acf304b198d23761ed5fad77cddf2d1871b53ea32bc669ce7500b5585b5671e9653e364025086a94f0a17ea11a657ae51086b6c955756655c52d0bb9
SSDEEP

192:aSA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2VtmaowuJ+ij6EUbOD6K:TA0TJASPp6p/D43FvWgepiao9B6IAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://207.246.95.196:8008/zGd8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Targets

- Target
  
  d3a60a1d0cac3375562fe266a04d698f_JaffaCakes118
- Size
  
  17KB
- MD5
  
  d3a60a1d0cac3375562fe266a04d698f
- SHA1
  
  bf56d4c5bc8ed8ce753c49e5ad2b8e506304b90f
- SHA256
  
  06e80eb59c7abda63ec37ee4cf8bae9e89794b7e46d788f36cd6af555284b946
- SHA512
  
  f7eae325acf304b198d23761ed5fad77cddf2d1871b53ea32bc669ce7500b5585b5671e9653e364025086a94f0a17ea11a657ae51086b6c955756655c52d0bb9
- SSDEEP
  
  192:aSA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2VtmaowuJ+ij6EUbOD6K:TA0TJASPp6p/D43FvWgepiao9B6IAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan