cobaltstrike | 25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9 | Triage

Sharing

General

Target

25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
Size

23KB
Sample

240927-gsytxsycml
MD5

439250a1b24166a010c7658a24bf800e
SHA1

c86f61d42baa3241edfb4170c8af697eaa3bc87e
SHA256

25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
SHA512

34d776abe70c39090c8be3555a57135f2d5c634de1ac22152053a7c92c1d2e987925c2c30680c2d82ab231d15d8f3dd0631511183b820a855a09b9c53c2e3eb4
SSDEEP

384:SJmann0my70gXc5UgOHiPX236BYtzLOZK+c+o/4/cKpFFZid77FFAsy:SQa0f7EU7m24GzLXBw0KpnZypy

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://206.166.251.28:80/k2Pp

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
- Size
  
  23KB
- MD5
  
  439250a1b24166a010c7658a24bf800e
- SHA1
  
  c86f61d42baa3241edfb4170c8af697eaa3bc87e
- SHA256
  
  25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
- SHA512
  
  34d776abe70c39090c8be3555a57135f2d5c634de1ac22152053a7c92c1d2e987925c2c30680c2d82ab231d15d8f3dd0631511183b820a855a09b9c53c2e3eb4
- SSDEEP
  
  384:SJmann0my70gXc5UgOHiPX236BYtzLOZK+c+o/4/cKpFFZid77FFAsy:SQa0f7EU7m24GzLXBw0KpnZypy
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan