cobaltstrike | 7f8e7c24a4009451d2b9ab73bc977289fa82195f29439cc7ffcb7d7699cae83c | Triage

Sharing

General

Target

7f8e7c24a4009451d2b9ab73bc977289fa82195f29439cc7ffcb7d7699cae83c
Size

1.4MB
Sample

240916-rcx8ka1epc
MD5

ad0ce1a7292fec03493fe85333fc9204
SHA1

557f57e80ed849776338f5b64bb303401dfd65e0
SHA256

7f8e7c24a4009451d2b9ab73bc977289fa82195f29439cc7ffcb7d7699cae83c
SHA512

c947cb2f8f20624dbc9d47700bc737a74ca59bf4208c2491d2260262b6616dba8497b8c7c06a96336658db0b4da7bb0b69e70dbedae82fde27828d1d7fb254ad
SSDEEP

24576:/O2NiXx8923qkkNlUxZKeOA0PtPy6rNb/u2cahx:m8iXW9QtZIRRhNb5dh

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://49.235.118.195:8441/jquery-3.3.2.slim.min.js

Attributes

user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

- Target
  
  7f8e7c24a4009451d2b9ab73bc977289fa82195f29439cc7ffcb7d7699cae83c
- Size
  
  1.4MB
- MD5
  
  ad0ce1a7292fec03493fe85333fc9204
- SHA1
  
  557f57e80ed849776338f5b64bb303401dfd65e0
- SHA256
  
  7f8e7c24a4009451d2b9ab73bc977289fa82195f29439cc7ffcb7d7699cae83c
- SHA512
  
  c947cb2f8f20624dbc9d47700bc737a74ca59bf4208c2491d2260262b6616dba8497b8c7c06a96336658db0b4da7bb0b69e70dbedae82fde27828d1d7fb254ad
- SSDEEP
  
  24576:/O2NiXx8923qkkNlUxZKeOA0PtPy6rNb/u2cahx:m8iXW9QtZIRRhNb5dh
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan