cobaltstrike | 449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701 | Triage

Sharing

General

Target

449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701
Size

1.7MB
Sample

240916-qv95eazeqd
MD5

b69480d1ff694ceb05a1aaa51bf593cb
SHA1

cad93f9df71262ea3a30c9ac74b877a887558c6b
SHA256

449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701
SHA512

c59aff25f8a17e07abd46bf04da60ea32f037bbd2fd888dd89b637c0fe8a69d73b526cc8b4793a349bfc6da58a25369c23faad34319be2df18b9c96e31b79476
SSDEEP

24576:3mLHEcMNSg04jvGfcfxD0lHWqbs1Legk8pdg5V8Yu0QtzbAie2:3GhoBZxDiLs88pdWqX5e2

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:8888/v95y

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Targets

- Target
  
  449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701
- Size
  
  1.7MB
- MD5
  
  b69480d1ff694ceb05a1aaa51bf593cb
- SHA1
  
  cad93f9df71262ea3a30c9ac74b877a887558c6b
- SHA256
  
  449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701
- SHA512
  
  c59aff25f8a17e07abd46bf04da60ea32f037bbd2fd888dd89b637c0fe8a69d73b526cc8b4793a349bfc6da58a25369c23faad34319be2df18b9c96e31b79476
- SSDEEP
  
  24576:3mLHEcMNSg04jvGfcfxD0lHWqbs1Legk8pdg5V8Yu0QtzbAie2:3GhoBZxDiLs88pdWqX5e2
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan