cobaltstrike | 03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122 | Triage

Sharing

General

Target

03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122
Size

19KB
Sample

240915-ppt1katcqe
MD5

d4c16548b779a475ba52997ba1cf96f2
SHA1

b41f89c0427ab5e9b5f13a43920ecbd043ac3bab
SHA256

03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122
SHA512

1cc9a9ad5864d2e328ae26d5b1e96c802220040f24ef65ea2681b6d95d80672b026c0a0e095da35eb8f79b6ef107f117a32325ce32aac2bce1bfe89772519c57
SSDEEP

192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2l3fRWF8qa1Dojjgi:qqaCF31cix+Dc4zj430FF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://127.0.0.1:60020/ASah

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Targets

- Target
  
  03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122
- Size
  
  19KB
- MD5
  
  d4c16548b779a475ba52997ba1cf96f2
- SHA1
  
  b41f89c0427ab5e9b5f13a43920ecbd043ac3bab
- SHA256
  
  03b978583f0909a69438f0930f26ebe2a02eb94193881300e45460b43f417122
- SHA512
  
  1cc9a9ad5864d2e328ae26d5b1e96c802220040f24ef65ea2681b6d95d80672b026c0a0e095da35eb8f79b6ef107f117a32325ce32aac2bce1bfe89772519c57
- SSDEEP
  
  192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2l3fRWF8qa1Dojjgi:qqaCF31cix+Dc4zj430FF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan