cobaltstrike | 4e098ca8de5cb452f1619137da30e1de2fc78344d0b93c551b5409c337603996 | Triage

Sharing

General

Target

4e098ca8de5cb452f1619137da30e1de2fc78344d0b93c551b5409c337603996
Size

19KB
Sample

240913-w9tc4asele
MD5

2e146ddd0f1efd88d69751076dd63f45
SHA1

195ebd91a1c92f63956ef94be6b267b06344cba3
SHA256

4e098ca8de5cb452f1619137da30e1de2fc78344d0b93c551b5409c337603996
SHA512

9563066366dae970c5de4f4ce44b8597261482dd9b4e5e7d10965e3f9bab0dfc45f63451ea4fb08e165b865641659f205b0188065344e9c765838d9228e0b6f5
SSDEEP

192:DV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2DiCAqbKWF8qa1Dojjgi:tqaCF31cix+Dc4zj2Aq/FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.41.128:8899/I7xe

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; NP06)

Targets

- Target
  
  4e098ca8de5cb452f1619137da30e1de2fc78344d0b93c551b5409c337603996
- Size
  
  19KB
- MD5
  
  2e146ddd0f1efd88d69751076dd63f45
- SHA1
  
  195ebd91a1c92f63956ef94be6b267b06344cba3
- SHA256
  
  4e098ca8de5cb452f1619137da30e1de2fc78344d0b93c551b5409c337603996
- SHA512
  
  9563066366dae970c5de4f4ce44b8597261482dd9b4e5e7d10965e3f9bab0dfc45f63451ea4fb08e165b865641659f205b0188065344e9c765838d9228e0b6f5
- SSDEEP
  
  192:DV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2DiCAqbKWF8qa1Dojjgi:tqaCF31cix+Dc4zj2Aq/FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan