cobaltstrike | 378f7292b1289e1830e865cca037aff200969103ec57f5b24db2223a16e1c6b4 | Triage

Sharing

General

Target

378f7292b1289e1830e865cca037aff200969103ec57f5b24db2223a16e1c6b4
Size

19KB
Sample

240917-lp64cawekg
MD5

d4b82674263872640230988456bd0142
SHA1

9d9043bf13556b8e3032a885277a6fc8f3a44d65
SHA256

378f7292b1289e1830e865cca037aff200969103ec57f5b24db2223a16e1c6b4
SHA512

33415fc2dd0c4b4407ba9fc14676f63caca976a50403b62ec83eb7cede0628697c3d68d7a7d946ade666a6fbccc58827517fa96a3065ba7ed032f527cce5739c
SSDEEP

192:LV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2xc2nhWF8qa1Dojjgi:lqaCF31cix+Dc4zjoc2ncFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://156.238.233.28:22244/tnH3

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)

Targets

- Target
  
  378f7292b1289e1830e865cca037aff200969103ec57f5b24db2223a16e1c6b4
- Size
  
  19KB
- MD5
  
  d4b82674263872640230988456bd0142
- SHA1
  
  9d9043bf13556b8e3032a885277a6fc8f3a44d65
- SHA256
  
  378f7292b1289e1830e865cca037aff200969103ec57f5b24db2223a16e1c6b4
- SHA512
  
  33415fc2dd0c4b4407ba9fc14676f63caca976a50403b62ec83eb7cede0628697c3d68d7a7d946ade666a6fbccc58827517fa96a3065ba7ed032f527cce5739c
- SSDEEP
  
  192:LV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2xc2nhWF8qa1Dojjgi:lqaCF31cix+Dc4zjoc2ncFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan