cobaltstrike | 6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e | Triage

Sharing

General

Target

6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e
Size

110KB
Sample

240919-zfffxszalf
MD5

ce5bebd8d14acf4d69b2346451a0d20e
SHA1

d17b4128f8315dc4b3fcf13f4418f6f0da75aab3
SHA256

6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e
SHA512

b687592f3d896124d224e893930863e7327fd4c95609ce857c4adcf35da5edbad12d97356bbe15b30390b4011792b9fdec7a1c9d3bc728d69126d5a7b1e0ff5c
SSDEEP

3072:9B1nFpIMGJbzgTUeIcYSlxT413SlbJYjdv:fFFp7GJzlcYSISE

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.26.218.210:11111/YAkX

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1)

Targets

- Target
  
  6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e
- Size
  
  110KB
- MD5
  
  ce5bebd8d14acf4d69b2346451a0d20e
- SHA1
  
  d17b4128f8315dc4b3fcf13f4418f6f0da75aab3
- SHA256
  
  6ffaa399959263b0eb6eeafabc144af8e51d456a21e54c3f3cef96419b83017e
- SHA512
  
  b687592f3d896124d224e893930863e7327fd4c95609ce857c4adcf35da5edbad12d97356bbe15b30390b4011792b9fdec7a1c9d3bc728d69126d5a7b1e0ff5c
- SSDEEP
  
  3072:9B1nFpIMGJbzgTUeIcYSlxT413SlbJYjdv:fFFp7GJzlcYSISE
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan