cobaltstrike | c2106b9bf618a13781cd6d4ce7124471d8bfa83831b50168e82fa11f58135678 | Triage

Sharing

General

Target

c2106b9bf618a13781cd6d4ce7124471d8bfa83831b50168e82fa11f58135678
Size

19KB
Sample

240914-x81w8asbjh
MD5

8b51aead79b8c51581d7c0f3b6c773e9
SHA1

a5220b62260e642f0396d758cc5dfcf3cacc0207
SHA256

c2106b9bf618a13781cd6d4ce7124471d8bfa83831b50168e82fa11f58135678
SHA512

b22c40f623160381bab1984d272f7e320e4fa467b5175406a5282f74688ed1ad6181e5ee515bb01971998d3aad183b391e916cb8b81bd61506f9529e1e48a65c
SSDEEP

192:pV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ghF75/rWF8qa1Dojjgi:LqaCF31cix+Dc4zjPhF7NSFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.242.131:80/pXIL

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Targets

- Target
  
  c2106b9bf618a13781cd6d4ce7124471d8bfa83831b50168e82fa11f58135678
- Size
  
  19KB
- MD5
  
  8b51aead79b8c51581d7c0f3b6c773e9
- SHA1
  
  a5220b62260e642f0396d758cc5dfcf3cacc0207
- SHA256
  
  c2106b9bf618a13781cd6d4ce7124471d8bfa83831b50168e82fa11f58135678
- SHA512
  
  b22c40f623160381bab1984d272f7e320e4fa467b5175406a5282f74688ed1ad6181e5ee515bb01971998d3aad183b391e916cb8b81bd61506f9529e1e48a65c
- SSDEEP
  
  192:pV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ghF75/rWF8qa1Dojjgi:LqaCF31cix+Dc4zjPhF7NSFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan