cobaltstrike | 9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258 | Triage

Sharing

General

Target

9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
Size

93KB
Sample

240913-l385vsxcmn
MD5

165c0fc71fb0f7fcec62811116f5b634
SHA1

3e44a0b4f151a881d51bf0660a015e306c33e789
SHA256

9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
SHA512

831f6e15b15b76bb477a3e08741ff9c173e8ad5c486234c1d8e853928619e674a7d0868bc8377e554037ac8164c0d30680b7e93b22b0149b5bef56d2bfc8cff3
SSDEEP

1536:tY4HAybOLsZSx/ZtsBQXHwUVxdnX+5EqTIm4gKN2P8Jd84h9lKASE:H0XtVxJuLTKNBd8aHuE

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.3.27:88/SZAo

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; ASU2JS)

Targets

- Target
  
  9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
- Size
  
  93KB
- MD5
  
  165c0fc71fb0f7fcec62811116f5b634
- SHA1
  
  3e44a0b4f151a881d51bf0660a015e306c33e789
- SHA256
  
  9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
- SHA512
  
  831f6e15b15b76bb477a3e08741ff9c173e8ad5c486234c1d8e853928619e674a7d0868bc8377e554037ac8164c0d30680b7e93b22b0149b5bef56d2bfc8cff3
- SSDEEP
  
  1536:tY4HAybOLsZSx/ZtsBQXHwUVxdnX+5EqTIm4gKN2P8Jd84h9lKASE:H0XtVxJuLTKNBd8aHuE
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2