cobaltstrike | e062f6ae9f075fcbcf110849533d254e04096d1b5cd856c5238fbae7bbc700e3 | Triage

Sharing

General

Target

e062f6ae9f075fcbcf110849533d254e04096d1b5cd856c5238fbae7bbc700e3
Size

1.0MB
Sample

240916-sb77tateqd
MD5

d1f42834531fdbec1326f9fda4743f79
SHA1

368b87c9e4298217024ffc23a05c21e77484d1ce
SHA256

e062f6ae9f075fcbcf110849533d254e04096d1b5cd856c5238fbae7bbc700e3
SHA512

49fe3249829c8be327ba4aedbfb9c9a526f90e2c1e7048cf27dc3423cc4e3e6c78b05902395480c7d814494292a92ccaf2c734acab69181fb71a48eaab0f350f
SSDEEP

24576:qxjwhd9rijrNCLtaSb89qYl9F8zeG/1SrgFDyvbM753e4mJLVE51f:qx4GZCLtaSI4eAbNS+yvba53tOLVcN

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:8888/v95y

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Targets

- Target
  
  e062f6ae9f075fcbcf110849533d254e04096d1b5cd856c5238fbae7bbc700e3
- Size
  
  1.0MB
- MD5
  
  d1f42834531fdbec1326f9fda4743f79
- SHA1
  
  368b87c9e4298217024ffc23a05c21e77484d1ce
- SHA256
  
  e062f6ae9f075fcbcf110849533d254e04096d1b5cd856c5238fbae7bbc700e3
- SHA512
  
  49fe3249829c8be327ba4aedbfb9c9a526f90e2c1e7048cf27dc3423cc4e3e6c78b05902395480c7d814494292a92ccaf2c734acab69181fb71a48eaab0f350f
- SSDEEP
  
  24576:qxjwhd9rijrNCLtaSb89qYl9F8zeG/1SrgFDyvbM753e4mJLVE51f:qx4GZCLtaSI4eAbNS+yvba53tOLVcN
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan