cobaltstrike | 69472188681a3cfdc60ef165f92e9634293d1e6abc250d74d15ef28c5b526a10 | Triage

Sharing

General

Target

69472188681a3cfdc60ef165f92e9634293d1e6abc250d74d15ef28c5b526a10
Size

19KB
Sample

240915-mp9d5szare
MD5

fbc541d88eb572ffd6f3dfb59d4d7384
SHA1

db835ab581efe47cd1870405a16af1eb9fe8b001
SHA256

69472188681a3cfdc60ef165f92e9634293d1e6abc250d74d15ef28c5b526a10
SHA512

6e24240646e120af107ab150f37dc434d262d9d939b026fec795f227fef93df42de6f9a62d279c1f5f8b1f18f6a68c9f59001c060a65653a3e2bfc96889cb1b5
SSDEEP

192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bkfkWF8qa1Dojjgi:rqaCF31cix+Dc4zjLRFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.110.121:6667/nJSR

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; Avant Browser)

Targets

- Target
  
  69472188681a3cfdc60ef165f92e9634293d1e6abc250d74d15ef28c5b526a10
- Size
  
  19KB
- MD5
  
  fbc541d88eb572ffd6f3dfb59d4d7384
- SHA1
  
  db835ab581efe47cd1870405a16af1eb9fe8b001
- SHA256
  
  69472188681a3cfdc60ef165f92e9634293d1e6abc250d74d15ef28c5b526a10
- SHA512
  
  6e24240646e120af107ab150f37dc434d262d9d939b026fec795f227fef93df42de6f9a62d279c1f5f8b1f18f6a68c9f59001c060a65653a3e2bfc96889cb1b5
- SSDEEP
  
  192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bkfkWF8qa1Dojjgi:rqaCF31cix+Dc4zjLRFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan