cobaltstrike | 58d82393590ce456b7464fa723218fcb67323f15fa4f5794a1f5fd9818032f44 | Triage

Sharing

General

Target

f53a3aab3577f84585d454f740674153_JaffaCakes118
Size

927KB
Sample

240925-fhlk6swekm
MD5

f53a3aab3577f84585d454f740674153
SHA1

f1cb2e77d4a46528b3041f3f5eda0db7dc9d9f07
SHA256

58d82393590ce456b7464fa723218fcb67323f15fa4f5794a1f5fd9818032f44
SHA512

59c8dd71a8d4df5211b259e9422c3d376fa08c0d866394ddcc0d24d0b0e6f04b79941121ab01efa5d730e34d2a866d2378a86edfce019894e477673d2a9bc556
SSDEEP

24576:HG3ZRx1744y480k0rdGPKEfpCn16BObdv:m3Z718+80k7KEfpOzdv

Score

10^/10

cobaltstrike backdoor execution trojan

Malware Config

Targets

- Target
  
  f53a3aab3577f84585d454f740674153_JaffaCakes118
- Size
  
  927KB
- MD5
  
  f53a3aab3577f84585d454f740674153
- SHA1
  
  f1cb2e77d4a46528b3041f3f5eda0db7dc9d9f07
- SHA256
  
  58d82393590ce456b7464fa723218fcb67323f15fa4f5794a1f5fd9818032f44
- SHA512
  
  59c8dd71a8d4df5211b259e9422c3d376fa08c0d866394ddcc0d24d0b0e6f04b79941121ab01efa5d730e34d2a866d2378a86edfce019894e477673d2a9bc556
- SSDEEP
  
  24576:HG3ZRx1744y480k0rdGPKEfpCn16BObdv:m3Z718+80k7KEfpOzdv
Score

10^/10

cobaltstrike backdoor execution trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cobaltstrikebackdoorexecutiontrojan

behavioral2

cobaltstrikebackdoorexecutiontrojan