cobaltstrike | 135dd4f787aa40b6d96f99a954eb1b2290b893e41fc8693ea140deb0c015c319 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135dd4f787aa40b6d96f99a954eb1b2290b893e41fc8693ea140deb0c015c319
Size

1.5MB
Sample

240916-qv95eazeqc
MD5

3e9eacceffefdbff4bcbb3a8f7b34614
SHA1

67d8b53742123904b525fe005be5baee944fc2c7
SHA256

135dd4f787aa40b6d96f99a954eb1b2290b893e41fc8693ea140deb0c015c319
SHA512

5915771dc8e9664870ffd794107d64195e3dfcb1875b274b825d8a3f2eb396ea7169c0e1b9be811b0e09d67db2a1ab33d8b60f689cec4f7a6f2a7777bc74efc9
SSDEEP

24576:nEHPtX3FjX7/1B2DmrTqUIfcZTYjZ4z0Pz+7rg0ohViVRitsH:nsPVB7/1/TYl4wLWotsH

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:8888/v95y

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Targets

- Target
  
  135dd4f787aa40b6d96f99a954eb1b2290b893e41fc8693ea140deb0c015c319
- Size
  
  1.5MB
- MD5
  
  3e9eacceffefdbff4bcbb3a8f7b34614
- SHA1
  
  67d8b53742123904b525fe005be5baee944fc2c7
- SHA256
  
  135dd4f787aa40b6d96f99a954eb1b2290b893e41fc8693ea140deb0c015c319
- SHA512
  
  5915771dc8e9664870ffd794107d64195e3dfcb1875b274b825d8a3f2eb396ea7169c0e1b9be811b0e09d67db2a1ab33d8b60f689cec4f7a6f2a7777bc74efc9
- SSDEEP
  
  24576:nEHPtX3FjX7/1B2DmrTqUIfcZTYjZ4z0Pz+7rg0ohViVRitsH:nsPVB7/1/TYl4wLWotsH
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan