cobaltstrike | a91eb6201915276d6c3281d480d7993bae453b40c26be4efb873c00d924fcaf8 | Triage

Sharing

General

Target

a91eb6201915276d6c3281d480d7993bae453b40c26be4efb873c00d924fcaf8
Size

19KB
Sample

240914-rekp9axhpf
MD5

edb00e09ba749c47439eb5ed52ee8d41
SHA1

fc275f8b71d65a3068cf93e13630e7e1de92837e
SHA256

a91eb6201915276d6c3281d480d7993bae453b40c26be4efb873c00d924fcaf8
SHA512

55bae189f406c10a36391e85a34f02709d01321822345743b9b7350c467a08efadca9885a39f781a04e7ce06ac72ed232fa2ea738e3e75050b7b581f95568447
SSDEEP

192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/23B4GWF8qa1Dojjgi:wqaCF31cix+Dc4zjTFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.250.189.43:4399/8nvA

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; FunWebProducts)

Targets

- Target
  
  a91eb6201915276d6c3281d480d7993bae453b40c26be4efb873c00d924fcaf8
- Size
  
  19KB
- MD5
  
  edb00e09ba749c47439eb5ed52ee8d41
- SHA1
  
  fc275f8b71d65a3068cf93e13630e7e1de92837e
- SHA256
  
  a91eb6201915276d6c3281d480d7993bae453b40c26be4efb873c00d924fcaf8
- SHA512
  
  55bae189f406c10a36391e85a34f02709d01321822345743b9b7350c467a08efadca9885a39f781a04e7ce06ac72ed232fa2ea738e3e75050b7b581f95568447
- SSDEEP
  
  192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/23B4GWF8qa1Dojjgi:wqaCF31cix+Dc4zjTFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan