cobaltstrike | c948b881be2735ca8467eba0c6fdeacd330a575c34f5ff917a5619de08459d66 | Triage

Sharing

General

Target

c948b881be2735ca8467eba0c6fdeacd330a575c34f5ff917a5619de08459d66
Size

2.6MB
Sample

240926-lq97dszejl
MD5

1fdf9334b849c3d8c36f58853dfbe040
SHA1

1636163be9b79e85608e76f267fbb11f1cf2ac26
SHA256

c948b881be2735ca8467eba0c6fdeacd330a575c34f5ff917a5619de08459d66
SHA512

b67af353804b9276641aa7200bd745314c7e24bc1060830d319e731b40753318ce8c6dc466679c1d29e1e3618c70df816d93e6c133fc593daff416fe06d67b58
SSDEEP

49152:uyUz2/sMqBljjTOx2l+7cZ9xDoP7zN1Enak:552lFD07zXk

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.2.130:80/in8N

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Targets

- Target
  
  c948b881be2735ca8467eba0c6fdeacd330a575c34f5ff917a5619de08459d66
- Size
  
  2.6MB
- MD5
  
  1fdf9334b849c3d8c36f58853dfbe040
- SHA1
  
  1636163be9b79e85608e76f267fbb11f1cf2ac26
- SHA256
  
  c948b881be2735ca8467eba0c6fdeacd330a575c34f5ff917a5619de08459d66
- SHA512
  
  b67af353804b9276641aa7200bd745314c7e24bc1060830d319e731b40753318ce8c6dc466679c1d29e1e3618c70df816d93e6c133fc593daff416fe06d67b58
- SSDEEP
  
  49152:uyUz2/sMqBljjTOx2l+7cZ9xDoP7zN1Enak:552lFD07zXk
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

cobaltstrikebackdoortrojan