cobaltstrike | 33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94 | Triage

Sharing

General

Target

33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94
Size

19KB
Sample

240926-lv85wszfrr
MD5

35ad6d4ef6da0003b4b91090c7c08a20
SHA1

2144995f3cd06c5e7f314c8c2d0c0815b2669528
SHA256

33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94
SHA512

79994b40229e2dc5a328282cb7a0a2a2257b0f55af62902226e0a7a3f1cb2df556f5f423f457d5c503e8d3a7474a095e4140158ac4b261660a2810f9cf6f5b57
SSDEEP

192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27yjFWF8qa1Dojjgi:OqaCF31cix+Dc4zjwFFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.16.10.17:80/VWLd

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)

Targets

- Target
  
  33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94
- Size
  
  19KB
- MD5
  
  35ad6d4ef6da0003b4b91090c7c08a20
- SHA1
  
  2144995f3cd06c5e7f314c8c2d0c0815b2669528
- SHA256
  
  33453f13379756cb8989b4f4ab24a34516a6d541a3c7881cbafef1f2e592aa94
- SHA512
  
  79994b40229e2dc5a328282cb7a0a2a2257b0f55af62902226e0a7a3f1cb2df556f5f423f457d5c503e8d3a7474a095e4140158ac4b261660a2810f9cf6f5b57
- SSDEEP
  
  192:sV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27yjFWF8qa1Dojjgi:OqaCF31cix+Dc4zjwFFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan