cobaltstrike | 24630db019f0de35f81c0a712d62ed04db084cdd287ea803f588e0f808186f98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24630db019f0de35f81c0a712d62ed04db084cdd287ea803f588e0f808186f98
Size

1.6MB
Sample

240911-tk5cyszfrf
MD5

b6f38a50620db20ac5c231f924f3b4a5
SHA1

635d79bbab78af66e561e2146ed0f5926dc886fb
SHA256

24630db019f0de35f81c0a712d62ed04db084cdd287ea803f588e0f808186f98
SHA512

bf6fa80d2e973faab2bf8cdf35aa7a4975b511fe2175a57b4ba86c670a49fc17a8c2aa6389578df1cf6a065effc0057384873ff6215eca0cb693e77a3f8272ed
SSDEEP

12288:ehJK5SJT91q5uM97uyuYpxwu5T1v+rMORuIDJI4yN/6YYJNtuX3e9ifzRBexvVIx:kJP3qeyff5k+5/EP0+9ue52kaX58oj

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://79.110.52.22:443/components/as.png

Attributes

user_agent
Host: tgmcheck.com Connection: close User-Agent: Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0

Targets

- Target
  
  24630db019f0de35f81c0a712d62ed04db084cdd287ea803f588e0f808186f98
- Size
  
  1.6MB
- MD5
  
  b6f38a50620db20ac5c231f924f3b4a5
- SHA1
  
  635d79bbab78af66e561e2146ed0f5926dc886fb
- SHA256
  
  24630db019f0de35f81c0a712d62ed04db084cdd287ea803f588e0f808186f98
- SHA512
  
  bf6fa80d2e973faab2bf8cdf35aa7a4975b511fe2175a57b4ba86c670a49fc17a8c2aa6389578df1cf6a065effc0057384873ff6215eca0cb693e77a3f8272ed
- SSDEEP
  
  12288:ehJK5SJT91q5uM97uyuYpxwu5T1v+rMORuIDJI4yN/6YYJNtuX3e9ifzRBexvVIx:kJP3qeyff5k+5/EP0+9ue52kaX58oj
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan