cobaltstrike | b97f1b594a1dbeced7ac418265b5f154b2ecc6b65596dc9b042c126bbc31c9a2 | Triage

Sharing

General

Target

b97f1b594a1dbeced7ac418265b5f154b2ecc6b65596dc9b042c126bbc31c9a2
Size

1.7MB
Sample

240916-szhxtsvfnb
MD5

27c9415644a8bd5b2e930f32ab72e365
SHA1

a242cd05663dd3c9c38578d06bfb6c50b0aeadde
SHA256

b97f1b594a1dbeced7ac418265b5f154b2ecc6b65596dc9b042c126bbc31c9a2
SHA512

a3e8be5440b4f108598239c66067196351134f093aa5365e18dba7e0eafe51721800687a2fd2ecbbee75cda3750cf1843982b14b425bec38c1345cd4b21424c6
SSDEEP

24576:AmLHEcMNSq0AvGfcfxD0rrWgOcLaBfpHu8Iba89MmDhARKIk4nucD:AGho/xDMtn2Bfp0+mdARKIko

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:8888/v95y

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Targets

- Target
  
  b97f1b594a1dbeced7ac418265b5f154b2ecc6b65596dc9b042c126bbc31c9a2
- Size
  
  1.7MB
- MD5
  
  27c9415644a8bd5b2e930f32ab72e365
- SHA1
  
  a242cd05663dd3c9c38578d06bfb6c50b0aeadde
- SHA256
  
  b97f1b594a1dbeced7ac418265b5f154b2ecc6b65596dc9b042c126bbc31c9a2
- SHA512
  
  a3e8be5440b4f108598239c66067196351134f093aa5365e18dba7e0eafe51721800687a2fd2ecbbee75cda3750cf1843982b14b425bec38c1345cd4b21424c6
- SSDEEP
  
  24576:AmLHEcMNSq0AvGfcfxD0rrWgOcLaBfpHu8Iba89MmDhARKIk4nucD:AGho/xDMtn2Bfp0+mdARKIko
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan