cobaltstrike | f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381 | Triage

Sharing

General

Target

f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381
Size

41KB
Sample

240927-h5597s1ekr
MD5

1888adc6c85a5087f9b3b782fffd266d
SHA1

3e111bbbf377193c031a1d58515acdb9d85e2d5e
SHA256

f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381
SHA512

235f4907626a7d2b25a44a87690cac96729efe587ae57615e6dc67142d0cd8759e8755a60d0779f3b653f36af3f733fd94f0a6488a0c09f025719e6321b522ca
SSDEEP

768:dBOZpWVJUNNua3RsFTcuvwpw49G7DetPG3R0aLHFJQUdW:uQJUjua3y9wS49G7SXa3QUd

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.200.223.34:443/WYPI

Attributes

user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/26.0

Targets

- Target
  
  f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381
- Size
  
  41KB
- MD5
  
  1888adc6c85a5087f9b3b782fffd266d
- SHA1
  
  3e111bbbf377193c031a1d58515acdb9d85e2d5e
- SHA256
  
  f40e79524475b06af902b7250fe204cdcec6a6c22c0ce85ed0827c970b15f381
- SHA512
  
  235f4907626a7d2b25a44a87690cac96729efe587ae57615e6dc67142d0cd8759e8755a60d0779f3b653f36af3f733fd94f0a6488a0c09f025719e6321b522ca
- SSDEEP
  
  768:dBOZpWVJUNNua3RsFTcuvwpw49G7DetPG3R0aLHFJQUdW:uQJUjua3y9wS49G7SXa3QUd
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan