cobaltstrike | af15cf2ff0fb8112c823c8c435ba24f4152fdfce52c42b123c91f50b2f8c55c8 | Triage

Sharing

General

Target

e6ae91952daf21ea5ae624437db8695b_JaffaCakes118
Size

17KB
Sample

240917-m6vx3szbkf
MD5

e6ae91952daf21ea5ae624437db8695b
SHA1

db416c7dea3c746a8afc5b4113873f5d466467f1
SHA256

af15cf2ff0fb8112c823c8c435ba24f4152fdfce52c42b123c91f50b2f8c55c8
SHA512

76527c09814d4df02c49f2fe90be7387420bcf96995c716c7d0a5557f3e5fb04e633a704b4b7ddf718bb4ebb324f1c80f09c4b50955269e608b7a73e8e956cbd
SSDEEP

192:abA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2Subj6EUbOD6kxiY:aA0TJASPp6p/D43FvWgepW66IAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://202.182.110.230:443/tTa4

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)

Targets

- Target
  
  e6ae91952daf21ea5ae624437db8695b_JaffaCakes118
- Size
  
  17KB
- MD5
  
  e6ae91952daf21ea5ae624437db8695b
- SHA1
  
  db416c7dea3c746a8afc5b4113873f5d466467f1
- SHA256
  
  af15cf2ff0fb8112c823c8c435ba24f4152fdfce52c42b123c91f50b2f8c55c8
- SHA512
  
  76527c09814d4df02c49f2fe90be7387420bcf96995c716c7d0a5557f3e5fb04e633a704b4b7ddf718bb4ebb324f1c80f09c4b50955269e608b7a73e8e956cbd
- SSDEEP
  
  192:abA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2Subj6EUbOD6kxiY:aA0TJASPp6p/D43FvWgepW66IAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan