cobaltstrike | 266c15d8ec5336b7c95c63cdf8f7156cede3953eb337d90e48e5da429b9e8192 | Triage

Sharing

General

Target

266c15d8ec5336b7c95c63cdf8f7156cede3953eb337d90e48e5da429b9e8192
Size

2.0MB
Sample

240913-wqhggszhkr
MD5

15b892781279f397a6bd52069354aef7
SHA1

7670960aeab9b1f34bcaca4f289397ee9c5d8c86
SHA256

266c15d8ec5336b7c95c63cdf8f7156cede3953eb337d90e48e5da429b9e8192
SHA512

9e88d59c09febf19ff0537d5b469e0079f4b9276efdc133aa9e324fa74187fcb448484aa2016b3f5043036db216767f6e88bd33b8011f68e24fe515d3e3560d2
SSDEEP

24576:rlLyxxMrMfM/hfTV45UbSnmnlo6symHsb/G6A7HZbX3+Ey:lyxGeMJhNolXHZ+

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.43.108.117:443/3kFy

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

Targets

- Target
  
  266c15d8ec5336b7c95c63cdf8f7156cede3953eb337d90e48e5da429b9e8192
- Size
  
  2.0MB
- MD5
  
  15b892781279f397a6bd52069354aef7
- SHA1
  
  7670960aeab9b1f34bcaca4f289397ee9c5d8c86
- SHA256
  
  266c15d8ec5336b7c95c63cdf8f7156cede3953eb337d90e48e5da429b9e8192
- SHA512
  
  9e88d59c09febf19ff0537d5b469e0079f4b9276efdc133aa9e324fa74187fcb448484aa2016b3f5043036db216767f6e88bd33b8011f68e24fe515d3e3560d2
- SSDEEP
  
  24576:rlLyxxMrMfM/hfTV45UbSnmnlo6symHsb/G6A7HZbX3+Ey:lyxGeMJhNolXHZ+
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan