cobaltstrike | 6b1d6e1fa0087fbbbfb33e85a561b14c654923515be8f078a9bd2af08773053f | Triage

Sharing

General

Target

6b1d6e1fa0087fbbbfb33e85a561b14c654923515be8f078a9bd2af08773053f
Size

5KB
Sample

240910-atbx8axgrk
MD5

34b0e24bc18ed17d512a092c28c64407
SHA1

0fead8a34d86ed0cdc546b5fddea4e66a50434c6
SHA256

6b1d6e1fa0087fbbbfb33e85a561b14c654923515be8f078a9bd2af08773053f
SHA512

b76dfe35b68efa45091f9ed81791186490a7b94380fafc15c9c3097cf47b7c646ebc58da04d7ac842189e8ddbcd6b9b92c2463eb3e256c614d5de4773c4d0b62
SSDEEP

96:azMFIRTlIk3ZiDtk/7HuNxbC9mJRawgbpzNt:/IRV3Z36NE9HL

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.66:443/o7bU

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSSEM)

Targets

- Target
  
  6b1d6e1fa0087fbbbfb33e85a561b14c654923515be8f078a9bd2af08773053f
- Size
  
  5KB
- MD5
  
  34b0e24bc18ed17d512a092c28c64407
- SHA1
  
  0fead8a34d86ed0cdc546b5fddea4e66a50434c6
- SHA256
  
  6b1d6e1fa0087fbbbfb33e85a561b14c654923515be8f078a9bd2af08773053f
- SHA512
  
  b76dfe35b68efa45091f9ed81791186490a7b94380fafc15c9c3097cf47b7c646ebc58da04d7ac842189e8ddbcd6b9b92c2463eb3e256c614d5de4773c4d0b62
- SSDEEP
  
  96:azMFIRTlIk3ZiDtk/7HuNxbC9mJRawgbpzNt:/IRV3Z36NE9HL
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan