cobaltstrike | 8c2d1e1ef5565bff721a12ab46a1a8b0be2414092eeecdf53f5e2663a4810114 | Triage

Sharing

General

Target

artifact_x64.exe
Size

19KB
Sample

240911-znt92sscqk
MD5

a9eeaa41e203c2591c41168b692dab61
SHA1

9a10c5b7e752d1f02e7090e832d541a26300a2e6
SHA256

8c2d1e1ef5565bff721a12ab46a1a8b0be2414092eeecdf53f5e2663a4810114
SHA512

07f2e669632e3d7375717d46b2e6ebe64360a844267e1ecc184b1ff5d9fa4c25110aeb695728e0e6c9187553cd7cebf1019553b3e6aa363ad49c81d07a92ad72
SSDEEP

192:IV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27xr1MWF8qa1Dojjgi:6qaCF31cix+Dc4zjihpFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://believe-servers.gl.at.ply.gg:43296/knL8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Targets

- Target
  
  artifact_x64.exe
- Size
  
  19KB
- MD5
  
  a9eeaa41e203c2591c41168b692dab61
- SHA1
  
  9a10c5b7e752d1f02e7090e832d541a26300a2e6
- SHA256
  
  8c2d1e1ef5565bff721a12ab46a1a8b0be2414092eeecdf53f5e2663a4810114
- SHA512
  
  07f2e669632e3d7375717d46b2e6ebe64360a844267e1ecc184b1ff5d9fa4c25110aeb695728e0e6c9187553cd7cebf1019553b3e6aa363ad49c81d07a92ad72
- SSDEEP
  
  192:IV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27xr1MWF8qa1Dojjgi:6qaCF31cix+Dc4zjihpFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan