cobaltstrike | ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e | Triage

Sharing

General

Target

ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e
Size

43KB
Sample

240922-w8qktatblc
MD5

720eae293ceec4c08e0fda8e120b87e8
SHA1

1c6816b518c3fc3c2e206f2daf062409e7e20731
SHA256

ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e
SHA512

f96b7a8946157fa46001566963700fe6ed58c7566ea7ab0351efa52259a37933a55ba7b83d07a87584f23c3f722de8b5f4e341c9cb0a4f71fd3de5968d399f86
SSDEEP

768:8HPvmLubpZy/RjGrFrFdDZO6+Aubkj21Ht96pKLY4vG7rhWLfnbuxIFj849FwXwn:8HPvmLube5jGBnZCDUKLlG7rOt8kFL

Score

10^/10

cobaltstrike metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/dDmZLRctSF-O2Y_Y6DNv7gGR1g00Lo-DSbAP10Qhyakl6e3RBIKZx4eGRNsN-6iE5mPtUWD3pQadMjciytVqzPL

Targets

- Target
  
  Organiser.exe
- Size
  
  72KB
- MD5
  
  2939997c9fc9dca6ccf9124200c5bcf7
- SHA1
  
  93d1265e21b77bd130b00afaa79c10df305be803
- SHA256
  
  69b2c233d4fdb8080ed851c14f8d35bbf2a1d0722b9fcd25881cef408c03cc31
- SHA512
  
  53278788eb7e931c83eb62ff9bdf814daf3ab51ffde6072d72131503f6eb806c6780be4ff2544ab772c316a39920c82b1cfe37bba2511186c95408be44e76407
- SSDEEP
  
  1536:ICpTCZG9iemtDViYHtOWcKwxJOnrKzGRBJtLyMb+KR0Nc8QsJq39:bp2Ai/s7RJOnrrRftLye0Nc8QsC9
Score

10^/10

cobaltstrike metasploit backdoor discovery trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cobaltstrikemetasploitbackdoordiscoverytrojan

behavioral2

cobaltstrikemetasploitbackdoordiscoverytrojan