cobaltstrike | b38cdb8ab8dc38c7c1007311382ebb703c6e77bc87083a4ce56724447eaeca2c | Triage

Sharing

General

Target

b38cdb8ab8dc38c7c1007311382ebb703c6e77bc87083a4ce56724447eaeca2c
Size

1.3MB
Sample

240910-jhnx3stgpa
MD5

1598e0bdd5b2fb716cc8612f5c73b7bd
SHA1

ea189c0f8152e01f994d37b92e515a5ccbc417bc
SHA256

b38cdb8ab8dc38c7c1007311382ebb703c6e77bc87083a4ce56724447eaeca2c
SHA512

741996b7e338ab50cafdda68af07e0c4d5e691cc34c2c123549742f649ff2e661a3e37ac3c1d4e54aa449accac7e38886fd8f2031015cf1faeb48f85eb5cc3f4
SSDEEP

24576:lfCnpVQpzp/itu3Y1+iZI82eaPRk2kTRWzOQoAbL721:AbQpzO4WZTRQBoA/721

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://106.54.229.172:7777/dKLb

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7)

Targets

- Target
  
  b38cdb8ab8dc38c7c1007311382ebb703c6e77bc87083a4ce56724447eaeca2c
- Size
  
  1.3MB
- MD5
  
  1598e0bdd5b2fb716cc8612f5c73b7bd
- SHA1
  
  ea189c0f8152e01f994d37b92e515a5ccbc417bc
- SHA256
  
  b38cdb8ab8dc38c7c1007311382ebb703c6e77bc87083a4ce56724447eaeca2c
- SHA512
  
  741996b7e338ab50cafdda68af07e0c4d5e691cc34c2c123549742f649ff2e661a3e37ac3c1d4e54aa449accac7e38886fd8f2031015cf1faeb48f85eb5cc3f4
- SSDEEP
  
  24576:lfCnpVQpzp/itu3Y1+iZI82eaPRk2kTRWzOQoAbL721:AbQpzO4WZTRQBoA/721
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan