cobaltstrike | c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea | Triage

Sharing

General

Target

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
Size

19KB
Sample

240918-g7ygpsxajd
MD5

2fa044ccad964926391f1d8aecd0f51e
SHA1

9e8e5f63040dad828ccd554d77ed33074961d955
SHA256

c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
SHA512

b911878f80bfed7468399e14ffe667d64433fc24701141a8615e2b816c8a9141ae9609fe0d0a8c82de855529df7ea3557c444be9d3d4f85e28e0c745075fecd8
SSDEEP

192:ZV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2imxOcWF8qa1Dojjgi:7qaCF31cix+Dc4zjrZFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://154.40.44.197:80/Z9Vt

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
- Size
  
  19KB
- MD5
  
  2fa044ccad964926391f1d8aecd0f51e
- SHA1
  
  9e8e5f63040dad828ccd554d77ed33074961d955
- SHA256
  
  c7119f1094f07a5ee7884a8b8b461d93066f55d87ed9af309e6c4ec1514459ea
- SHA512
  
  b911878f80bfed7468399e14ffe667d64433fc24701141a8615e2b816c8a9141ae9609fe0d0a8c82de855529df7ea3557c444be9d3d4f85e28e0c745075fecd8
- SSDEEP
  
  192:ZV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2imxOcWF8qa1Dojjgi:7qaCF31cix+Dc4zjrZFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan