cobaltstrike | c85928cdcf889a30a00f254cd8c4711323f315584a2337c10eec184c1cec765f | Triage

Sharing

General

Target

c85928cdcf889a30a00f254cd8c4711323f315584a2337c10eec184c1cec765f
Size

19KB
Sample

240913-a9rnlsvenm
MD5

0f41137599796dfec1adbb38bfc10fc6
SHA1

e2e38e8550286bb28526231ee0dc2cafa5793d8b
SHA256

c85928cdcf889a30a00f254cd8c4711323f315584a2337c10eec184c1cec765f
SHA512

b4e456b22d3b35f77440ae756008fd21679f673cebd38e9a1504528acfdfb750e9e599e25dcc278238b62dfda9414de9b6ef6b731a8add0442c0955f1b62423a
SSDEEP

192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ohof5NXaWF8qa1Dojjgi:mqaCF31cix+Dc4zjvOTDFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://91.92.243.205:80/hNAf

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSSEM)

Targets

- Target
  
  c85928cdcf889a30a00f254cd8c4711323f315584a2337c10eec184c1cec765f
- Size
  
  19KB
- MD5
  
  0f41137599796dfec1adbb38bfc10fc6
- SHA1
  
  e2e38e8550286bb28526231ee0dc2cafa5793d8b
- SHA256
  
  c85928cdcf889a30a00f254cd8c4711323f315584a2337c10eec184c1cec765f
- SHA512
  
  b4e456b22d3b35f77440ae756008fd21679f673cebd38e9a1504528acfdfb750e9e599e25dcc278238b62dfda9414de9b6ef6b731a8add0442c0955f1b62423a
- SSDEEP
  
  192:0V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ohof5NXaWF8qa1Dojjgi:mqaCF31cix+Dc4zjvOTDFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan