cobaltstrike | dabfbcaac6801fba0bd5f7b8f50f02dd04e305e6855c2724c5f527a4a4ec1aff | Triage

Sharing

General

Target

dabfbcaac6801fba0bd5f7b8f50f02dd04e305e6855c2724c5f527a4a4ec1aff
Size

19KB
Sample

240926-sahkrswdne
MD5

cc91df1f73ab760e2ded2dfe6945b7e9
SHA1

5f74e0a7246691f562b000f9c139f73d62774a26
SHA256

dabfbcaac6801fba0bd5f7b8f50f02dd04e305e6855c2724c5f527a4a4ec1aff
SHA512

6b057e69c2b8c3d24b42d0c9e57f9538419a890194b560f0c93328364180a35352e6cc908ec5e6c4a398d962308ecfcf7a8fe407da1bac470db9f25a122e6f4f
SSDEEP

192:bV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2HrXqWF8qa1Dojjgi:1qaCF31cix+Dc4zjMXzFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.113.96.6:4444/uv1A

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Avant Browser)

Targets

- Target
  
  dabfbcaac6801fba0bd5f7b8f50f02dd04e305e6855c2724c5f527a4a4ec1aff
- Size
  
  19KB
- MD5
  
  cc91df1f73ab760e2ded2dfe6945b7e9
- SHA1
  
  5f74e0a7246691f562b000f9c139f73d62774a26
- SHA256
  
  dabfbcaac6801fba0bd5f7b8f50f02dd04e305e6855c2724c5f527a4a4ec1aff
- SHA512
  
  6b057e69c2b8c3d24b42d0c9e57f9538419a890194b560f0c93328364180a35352e6cc908ec5e6c4a398d962308ecfcf7a8fe407da1bac470db9f25a122e6f4f
- SSDEEP
  
  192:bV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2HrXqWF8qa1Dojjgi:1qaCF31cix+Dc4zjMXzFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan