cobaltstrike | 25119874c3beba9dd7bcdad53aca8fe379f82d9b20da133b1928a4ec4eb7ec7d | Triage

Sharing

General

Target

25119874c3beba9dd7bcdad53aca8fe379f82d9b20da133b1928a4ec4eb7ec7d
Size

576KB
Sample

240925-wlwhjsyglp
MD5

121b5713d96bbbb1c3ee424e6fc70646
SHA1

f2c96246a92a5665ca7574bcb4094c7a6b4cf6d2
SHA256

25119874c3beba9dd7bcdad53aca8fe379f82d9b20da133b1928a4ec4eb7ec7d
SHA512

1360224ced9d3b4a4ae3fdbeb05f7d0ea8e89968f931a4a22a220cf021f4a138de43e437b3cb6353f6c87e70fb1130e65c3b6b60927631b2079f5aa885bc6dd9
SSDEEP

12288:HCrsUxqU00tC3vHmswk3Ta77Hp0fWAUmBpmaNxlvYFLHqoOJ:Hzw00tbLUlvYFLHqoOJ

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.214.174.101:50344/Dhy8

Attributes

user_agent
User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.101

Targets

- Target
  
  25119874c3beba9dd7bcdad53aca8fe379f82d9b20da133b1928a4ec4eb7ec7d
- Size
  
  576KB
- MD5
  
  121b5713d96bbbb1c3ee424e6fc70646
- SHA1
  
  f2c96246a92a5665ca7574bcb4094c7a6b4cf6d2
- SHA256
  
  25119874c3beba9dd7bcdad53aca8fe379f82d9b20da133b1928a4ec4eb7ec7d
- SHA512
  
  1360224ced9d3b4a4ae3fdbeb05f7d0ea8e89968f931a4a22a220cf021f4a138de43e437b3cb6353f6c87e70fb1130e65c3b6b60927631b2079f5aa885bc6dd9
- SSDEEP
  
  12288:HCrsUxqU00tC3vHmswk3Ta77Hp0fWAUmBpmaNxlvYFLHqoOJ:Hzw00tbLUlvYFLHqoOJ
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan