cobaltstrike | 04bc1fdbcbb73e5aefbcc50a1292cfde9ab86b040cf0ebfb0cb132997af933bd | Triage

Sharing

General

Target

04bc1fdbcbb73e5aefbcc50a1292cfde9ab86b040cf0ebfb0cb132997af933bd
Size

1.2MB
Sample

240919-fph4masbnc
MD5

60a31839c216d34200d83895aae0e58e
SHA1

0916c0d63e6e6f58617d2c94d7758bb30b72eb05
SHA256

04bc1fdbcbb73e5aefbcc50a1292cfde9ab86b040cf0ebfb0cb132997af933bd
SHA512

540e518b11a689b9ab757a4a650c94707f16ae2f64228da2d7e09099c04afd131f07f5853be1ae0a2f70637c1e48aa9f810d019197cd5e709c4a57527f244eab
SSDEEP

12288:spIMVkb0RBiIOF1NojKvxuuEytY4j75NTEKcx4+oV0e+ErGo3ujfS0+rDiRWc:sZB2IOHNm8jIZhpJKvrDigc

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.233.133:80/iD7y

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; InfoPath.2)

Targets

- Target
  
  04bc1fdbcbb73e5aefbcc50a1292cfde9ab86b040cf0ebfb0cb132997af933bd
- Size
  
  1.2MB
- MD5
  
  60a31839c216d34200d83895aae0e58e
- SHA1
  
  0916c0d63e6e6f58617d2c94d7758bb30b72eb05
- SHA256
  
  04bc1fdbcbb73e5aefbcc50a1292cfde9ab86b040cf0ebfb0cb132997af933bd
- SHA512
  
  540e518b11a689b9ab757a4a650c94707f16ae2f64228da2d7e09099c04afd131f07f5853be1ae0a2f70637c1e48aa9f810d019197cd5e709c4a57527f244eab
- SSDEEP
  
  12288:spIMVkb0RBiIOF1NojKvxuuEytY4j75NTEKcx4+oV0e+ErGo3ujfS0+rDiRWc:sZB2IOHNm8jIZhpJKvrDigc
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan