cobaltstrike | f921f06237487bccf11f2c25f78bdbcc911147671d9545fa5b90360e638372e1 | Triage

Sharing

General

Target

f921f06237487bccf11f2c25f78bdbcc911147671d9545fa5b90360e638372e1
Size

110KB
Sample

240919-ylfhfaxcme
MD5

bbc6072fcb602d7d49c8e88a675e4634
SHA1

8a68d7ce45943dcfd29a721d9982a4cf1e47eaa5
SHA256

f921f06237487bccf11f2c25f78bdbcc911147671d9545fa5b90360e638372e1
SHA512

3770092f3ce89d7aa61138838f7ba7a13367b9303193e608a98632caf72372825b6d3042567ea3b4e5ad5005c7fb58cf70356d94226357502760d08daaf7196c
SSDEEP

3072:10ZICBepbh2prkusXbCVjCO9HbcKb+P34xM:ayCBepwpQhXbCJ7choC

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.26.218.210:11111/YAkX

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)

Targets

- Target
  
  f921f06237487bccf11f2c25f78bdbcc911147671d9545fa5b90360e638372e1
- Size
  
  110KB
- MD5
  
  bbc6072fcb602d7d49c8e88a675e4634
- SHA1
  
  8a68d7ce45943dcfd29a721d9982a4cf1e47eaa5
- SHA256
  
  f921f06237487bccf11f2c25f78bdbcc911147671d9545fa5b90360e638372e1
- SHA512
  
  3770092f3ce89d7aa61138838f7ba7a13367b9303193e608a98632caf72372825b6d3042567ea3b4e5ad5005c7fb58cf70356d94226357502760d08daaf7196c
- SSDEEP
  
  3072:10ZICBepbh2prkusXbCVjCO9HbcKb+P34xM:ayCBepwpQhXbCJ7choC
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan