cobaltstrike | 9496733fd928f88431c1e6b60c46826ec6c883e1f1562facc9b026d681474f75 | Triage

Sharing

General

Target

9496733fd928f88431c1e6b60c46826ec6c883e1f1562facc9b026d681474f75
Size

19KB
Sample

240918-mnwfwswcqe
MD5

f4e334be324ccca91f9e7c57f66d8f71
SHA1

34302594386182dae88a715bfab71f5a91452d4b
SHA256

9496733fd928f88431c1e6b60c46826ec6c883e1f1562facc9b026d681474f75
SHA512

cc87ad58ea33a03e68bef3c49cee35988c6dbe736083b851d80f89a4dcbd160262b182e8b2b42f8daa31878f98191fec32e731bb12ccb930f88b4918a941196f
SSDEEP

192:mV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tEmWF8qa1Dojjgi:AqaCF31cix+Dc4zj9XFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.40.233.192:443/MvRH

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATM)

Targets

- Target
  
  9496733fd928f88431c1e6b60c46826ec6c883e1f1562facc9b026d681474f75
- Size
  
  19KB
- MD5
  
  f4e334be324ccca91f9e7c57f66d8f71
- SHA1
  
  34302594386182dae88a715bfab71f5a91452d4b
- SHA256
  
  9496733fd928f88431c1e6b60c46826ec6c883e1f1562facc9b026d681474f75
- SHA512
  
  cc87ad58ea33a03e68bef3c49cee35988c6dbe736083b851d80f89a4dcbd160262b182e8b2b42f8daa31878f98191fec32e731bb12ccb930f88b4918a941196f
- SSDEEP
  
  192:mV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tEmWF8qa1Dojjgi:AqaCF31cix+Dc4zj9XFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan