cobaltstrike | 835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448 | Triage

Sharing

General

Target

835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448
Size

578KB
Sample

240914-rjbcdaybmg
MD5

9f72e5bef527a4547581b04a6f75ee02
SHA1

011e2cb44654c974e250b416aea35218bb506a0f
SHA256

835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448
SHA512

2535b4f1629db15ab47af4ebc640699dde5f32b89e9b010adddf2dbdde6e32ddf058d0caefb8911b1105140263ecdac760193ee82975ea120690c3476abd6d1e
SSDEEP

12288:zarMyqsDbt/OLH0Zywk3Ta77Hp0fWAUmBmmNtlFvYFLCqoJO:zXqDbt30hFvYFLCqoJO

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.110.102.24:5555/Iht8

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Targets

- Target
  
  835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448
- Size
  
  578KB
- MD5
  
  9f72e5bef527a4547581b04a6f75ee02
- SHA1
  
  011e2cb44654c974e250b416aea35218bb506a0f
- SHA256
  
  835c07f54e915980bef6f9a1e4d17224e71ee6dae7f524de417e6881a0295448
- SHA512
  
  2535b4f1629db15ab47af4ebc640699dde5f32b89e9b010adddf2dbdde6e32ddf058d0caefb8911b1105140263ecdac760193ee82975ea120690c3476abd6d1e
- SSDEEP
  
  12288:zarMyqsDbt/OLH0Zywk3Ta77Hp0fWAUmBmmNtlFvYFLCqoJO:zXqDbt30hFvYFLCqoJO
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan