cobaltstrike | 66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c | Triage

Sharing

General

Target

66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c
Size

19KB
Sample

240913-xg9p2sshqe
MD5

e5f1bb2d3bcaf31398b5d7f65092e6f8
SHA1

ea7d89eb3279b5fc1c5a3dda3568f0f1af9a5d1e
SHA256

66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c
SHA512

5ef48cf754b0536ce0d3cfe7caf32ff68035066262682b5d584d7f0b62eb85bea596ab1f1560992e5bf5798ad57647cc70b3a43c6863e98168d0799bbab4b804
SSDEEP

192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2F4A+8GWF8qa1Dojjgi:KqaCF31cix+Dc4zjC5+gFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.108.11.221:8899/BdrE

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C; .NET4.0E)

Targets

- Target
  
  66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c
- Size
  
  19KB
- MD5
  
  e5f1bb2d3bcaf31398b5d7f65092e6f8
- SHA1
  
  ea7d89eb3279b5fc1c5a3dda3568f0f1af9a5d1e
- SHA256
  
  66773b413e69b6765846f41e80963047eaff27abf0adc2eab1c898e81a74680c
- SHA512
  
  5ef48cf754b0536ce0d3cfe7caf32ff68035066262682b5d584d7f0b62eb85bea596ab1f1560992e5bf5798ad57647cc70b3a43c6863e98168d0799bbab4b804
- SSDEEP
  
  192:YV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2F4A+8GWF8qa1Dojjgi:KqaCF31cix+Dc4zjC5+gFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan