cobaltstrike | 11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6 | Triage

Sharing

General

Target

11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6
Size

19KB
Sample

240914-rvlx9aydkq
MD5

a3c518ee64a58d5e1f739124773ced42
SHA1

0d96d2e08250ce165252c9a44b79ef4f83a2f1ca
SHA256

11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6
SHA512

571eeca805b46900359e535f45eb6873bdb9a30a86ebfeaebb134fc4ac43186f713fa09d4b6f0256efe40fe3bb4031d8edea68511c7a29b913f18c8087184a53
SSDEEP

192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/24Zq7WF8qa1Dojjgi:OqaCF31cix+Dc4zjzlFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://112.44.197.77:30440/DTRs

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)

Targets

- Target
  
  11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6
- Size
  
  19KB
- MD5
  
  a3c518ee64a58d5e1f739124773ced42
- SHA1
  
  0d96d2e08250ce165252c9a44b79ef4f83a2f1ca
- SHA256
  
  11ee0f0ff4379a39fe2a1465c3210c5e15d6ae18b9c071d0a1df9312d05323e6
- SHA512
  
  571eeca805b46900359e535f45eb6873bdb9a30a86ebfeaebb134fc4ac43186f713fa09d4b6f0256efe40fe3bb4031d8edea68511c7a29b913f18c8087184a53
- SSDEEP
  
  192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/24Zq7WF8qa1Dojjgi:OqaCF31cix+Dc4zjzlFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan