cobaltstrike | 86bb5973db922636e58d422ff8ba3ffbd11f1478c10df5063df0a3c3a80c0585 | Triage

Sharing

General

Target

86bb5973db922636e58d422ff8ba3ffbd11f1478c10df5063df0a3c3a80c0585
Size

19KB
Sample

240921-mg5qzsxdna
MD5

20d21c6566e1af3caa82be1b5a816ee1
SHA1

bb437d5471b6ccf5ef6f343e6355906ba5d35526
SHA256

86bb5973db922636e58d422ff8ba3ffbd11f1478c10df5063df0a3c3a80c0585
SHA512

673f92c0b38f63733286a366cbffacfcd0378572f3921fde962722b58cedc53d89b4d7523b4257ef021f2af94b183ca68ed7f91558529b05d34c33d5a889c9b3
SSDEEP

192:uV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2wpCiF1WF8qa1Dojjgi:4qaCF31cix+Dc4zjxpCPFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.49.128:4444/oP9e

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)

Targets

- Target
  
  86bb5973db922636e58d422ff8ba3ffbd11f1478c10df5063df0a3c3a80c0585
- Size
  
  19KB
- MD5
  
  20d21c6566e1af3caa82be1b5a816ee1
- SHA1
  
  bb437d5471b6ccf5ef6f343e6355906ba5d35526
- SHA256
  
  86bb5973db922636e58d422ff8ba3ffbd11f1478c10df5063df0a3c3a80c0585
- SHA512
  
  673f92c0b38f63733286a366cbffacfcd0378572f3921fde962722b58cedc53d89b4d7523b4257ef021f2af94b183ca68ed7f91558529b05d34c33d5a889c9b3
- SSDEEP
  
  192:uV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2wpCiF1WF8qa1Dojjgi:4qaCF31cix+Dc4zjxpCPFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan