cobaltstrike | b151876e8b4405344dcbf1c7738be9f93f2cf2cc0cde9ba18d73fa443f460ecd | Triage

Sharing

General

Target

b151876e8b4405344dcbf1c7738be9f93f2cf2cc0cde9ba18d73fa443f460ecd.exe
Size

72KB
Sample

240921-qj1ftsthpq
MD5

5c74e515750a07cd1800406809bccdfe
SHA1

ea0e48d2dededa100b57dc62a75baa60a8e32f57
SHA256

b151876e8b4405344dcbf1c7738be9f93f2cf2cc0cde9ba18d73fa443f460ecd
SHA512

e19828d9223665295b57fa4cb517433924372242aab9e00005b2e950b747d857b69878679af6beaf63cf8b7f78072b0f205162e677bf278e5f3ae1cfbb7dd9e7
SSDEEP

1536:IDlgtBH7PCMhK2x68SVoe7PsStwLZhOGwMb+KR0Nc8QsJq39:ltBTCMhKhVocsStiYe0Nc8QsC9

Score

10^/10

cobaltstrike metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/huGC1aTx6yf7CvoLneazWgnuOQe879sh

Targets

- Target
  
  b151876e8b4405344dcbf1c7738be9f93f2cf2cc0cde9ba18d73fa443f460ecd.exe
- Size
  
  72KB
- MD5
  
  5c74e515750a07cd1800406809bccdfe
- SHA1
  
  ea0e48d2dededa100b57dc62a75baa60a8e32f57
- SHA256
  
  b151876e8b4405344dcbf1c7738be9f93f2cf2cc0cde9ba18d73fa443f460ecd
- SHA512
  
  e19828d9223665295b57fa4cb517433924372242aab9e00005b2e950b747d857b69878679af6beaf63cf8b7f78072b0f205162e677bf278e5f3ae1cfbb7dd9e7
- SSDEEP
  
  1536:IDlgtBH7PCMhK2x68SVoe7PsStwLZhOGwMb+KR0Nc8QsJq39:ltBTCMhKhVocsStiYe0Nc8QsC9
Score

10^/10

cobaltstrike metasploit backdoor discovery trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cobaltstrikemetasploitbackdoordiscoverytrojan

behavioral2

cobaltstrikemetasploitbackdoordiscoverytrojan