cobaltstrike | 9ba8bd7e9125d20b7c00d1ea25bbc932f6347146d30417a75c68e98365ca7c4a | Triage

Sharing

General

Target

9ba8bd7e9125d20b7c00d1ea25bbc932f6347146d30417a75c68e98365ca7c4a
Size

1.5MB
Sample

240918-e15w4atapk
MD5

ded1a2615fc6185bebc3ba6865ea7e3d
SHA1

06a7dce47a1a86fee25b9aad632dc4d41c982334
SHA256

9ba8bd7e9125d20b7c00d1ea25bbc932f6347146d30417a75c68e98365ca7c4a
SHA512

4e6574284a9bdadd5efa5b0625a06c0e265d346987822e872b27eac5133ba3bbbfbd0933b442d1e201d87aaffb47abc6fdbc20f18adbd5f93a24949320fd2e80
SSDEEP

24576:ZG5LeAqWh6eoGXn88NSrNpdp+DfymWw9cs:ZG55qWEre8bDw9

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.211.143:80/iJFd

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Targets

- Target
  
  9ba8bd7e9125d20b7c00d1ea25bbc932f6347146d30417a75c68e98365ca7c4a
- Size
  
  1.5MB
- MD5
  
  ded1a2615fc6185bebc3ba6865ea7e3d
- SHA1
  
  06a7dce47a1a86fee25b9aad632dc4d41c982334
- SHA256
  
  9ba8bd7e9125d20b7c00d1ea25bbc932f6347146d30417a75c68e98365ca7c4a
- SHA512
  
  4e6574284a9bdadd5efa5b0625a06c0e265d346987822e872b27eac5133ba3bbbfbd0933b442d1e201d87aaffb47abc6fdbc20f18adbd5f93a24949320fd2e80
- SSDEEP
  
  24576:ZG5LeAqWh6eoGXn88NSrNpdp+DfymWw9cs:ZG55qWEre8bDw9
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan