cobaltstrike | ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab | Triage

Sharing

General

Target

ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab
Size

110KB
Sample

240919-x6nh4swdph
MD5

760966bf4bc8ca54dae1d8b1efc49991
SHA1

53617e385e6f6b89aef5b2a238e4dc586831defd
SHA256

ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab
SHA512

fb335d95b9947fc2cbbf87ce4a73022957927fe418acac51c04f7310d699b60f476266f236e05b51c1cb0e1711dff731b1069cd3629b52de093e95d102d44419
SSDEEP

3072:piR5xblbXbNjvuMEtgIlgpypBjAbl/Wa:uDblbX1tEtgWPjoW

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.26.218.210:11111/YAkX

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)

Targets

- Target
  
  ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab
- Size
  
  110KB
- MD5
  
  760966bf4bc8ca54dae1d8b1efc49991
- SHA1
  
  53617e385e6f6b89aef5b2a238e4dc586831defd
- SHA256
  
  ce907dec94581293bb8db1368561e60b0f01e66d83610b90cd241d1571dbd7ab
- SHA512
  
  fb335d95b9947fc2cbbf87ce4a73022957927fe418acac51c04f7310d699b60f476266f236e05b51c1cb0e1711dff731b1069cd3629b52de093e95d102d44419
- SSDEEP
  
  3072:piR5xblbXbNjvuMEtgIlgpypBjAbl/Wa:uDblbX1tEtgWPjoW
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan