cobaltstrike | 924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf | Triage

Sharing

General

Target

924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf
Size

19KB
Sample

240924-z4lb3swcjr
MD5

f23784f4ee7af36969a54fe21a9b29f5
SHA1

629b290a4246e2a9705e6a3ae9c595c51af426be
SHA256

924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf
SHA512

a51f8322553c1c775302f1c589d16e415d6d6af14e6b3dc46513d0a80604bea2186a39f4d89cf6809888f42d22e582132e39773f06a655c6ed3af19534e765d4
SSDEEP

192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tMoxIkojWF8qa1Dojjgi:rqaCF31cix+Dc4zjUFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.155:80/lV7d

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Targets

- Target
  
  924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf
- Size
  
  19KB
- MD5
  
  f23784f4ee7af36969a54fe21a9b29f5
- SHA1
  
  629b290a4246e2a9705e6a3ae9c595c51af426be
- SHA256
  
  924e9ac7e64261b2bec4f10a4c4edb83c56ce2bd1210efa0c29acc91ed7f8ecf
- SHA512
  
  a51f8322553c1c775302f1c589d16e415d6d6af14e6b3dc46513d0a80604bea2186a39f4d89cf6809888f42d22e582132e39773f06a655c6ed3af19534e765d4
- SSDEEP
  
  192:JV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2tMoxIkojWF8qa1Dojjgi:rqaCF31cix+Dc4zjUFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan