cobaltstrike | 4e82ab5528ee661c69e500f1407b5e9514717ad2d2e21279cee9f42a13d26bdd | Triage

Sharing

General

Target

4e82ab5528ee661c69e500f1407b5e9514717ad2d2e21279cee9f42a13d26bddN
Size

17KB
Sample

240920-npx7jstfrc
MD5

217cb80c8029b347bd3b7133b5294440
SHA1

b0e16e1ec093cc5506683cdcb64a983cdb3bb7e2
SHA256

4e82ab5528ee661c69e500f1407b5e9514717ad2d2e21279cee9f42a13d26bdd
SHA512

100ac498935fb47a18e65e7fb87dcbf034212c8c4bf5fcc07d39f08b4119fdf5213c6ddeaf491fdc0e514b6b80878d326abd1c3131d251e6c05774b3ce329965
SSDEEP

192:acA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2Q5efod9j6EUbOD6kxiY:FA0TJASPp6p/D43FvWgepE5eM6IAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.4:10010/J5lr

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Targets

- Target
  
  4e82ab5528ee661c69e500f1407b5e9514717ad2d2e21279cee9f42a13d26bddN
- Size
  
  17KB
- MD5
  
  217cb80c8029b347bd3b7133b5294440
- SHA1
  
  b0e16e1ec093cc5506683cdcb64a983cdb3bb7e2
- SHA256
  
  4e82ab5528ee661c69e500f1407b5e9514717ad2d2e21279cee9f42a13d26bdd
- SHA512
  
  100ac498935fb47a18e65e7fb87dcbf034212c8c4bf5fcc07d39f08b4119fdf5213c6ddeaf491fdc0e514b6b80878d326abd1c3131d251e6c05774b3ce329965
- SSDEEP
  
  192:acA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2Q5efod9j6EUbOD6kxiY:FA0TJASPp6p/D43FvWgepE5eM6IAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan