cobaltstrike | 0265101119eeef07d80177b1b65b0c19b3b3f032f77db34e8021cf1c553a74bc | Triage

Sharing

General

Target

0265101119eeef07d80177b1b65b0c19b3b3f032f77db34e8021cf1c553a74bc
Size

19KB
Sample

240912-elrqxszgnk
MD5

785bfde368c9a7513d382c93dad17c81
SHA1

391756c94f49627bb8932886a53aa3530db305bc
SHA256

0265101119eeef07d80177b1b65b0c19b3b3f032f77db34e8021cf1c553a74bc
SHA512

733d525c4f220ec1659bd2514ddb57be8d82e64e32a370d87dabd4a97206b9bd33b7857c3f6c4ae6b605ac742438c3be6e9611cb41869c457bd65204574d4ca5
SSDEEP

192:yoV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27hpX6DXWF8qa1Dojjgi:JqaCF31cix+Dc4zjshp6mFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.219.15.69:4444/9xUW

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Targets

- Target
  
  0265101119eeef07d80177b1b65b0c19b3b3f032f77db34e8021cf1c553a74bc
- Size
  
  19KB
- MD5
  
  785bfde368c9a7513d382c93dad17c81
- SHA1
  
  391756c94f49627bb8932886a53aa3530db305bc
- SHA256
  
  0265101119eeef07d80177b1b65b0c19b3b3f032f77db34e8021cf1c553a74bc
- SHA512
  
  733d525c4f220ec1659bd2514ddb57be8d82e64e32a370d87dabd4a97206b9bd33b7857c3f6c4ae6b605ac742438c3be6e9611cb41869c457bd65204574d4ca5
- SSDEEP
  
  192:yoV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27hpX6DXWF8qa1Dojjgi:JqaCF31cix+Dc4zjshp6mFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan