cobaltstrike | 503c4f84da9710d3a4d5d5e065664ba796176466fdeda5adcea43d16e19d31b5 | Triage

Sharing

General

Target

503c4f84da9710d3a4d5d5e065664ba796176466fdeda5adcea43d16e19d31b5
Size

19KB
Sample

240927-ln4a3awdqp
MD5

65a68d7eff257226e8c233c56d1e5317
SHA1

90b2ec682dc55c22abc08022f8e15b2297c210e1
SHA256

503c4f84da9710d3a4d5d5e065664ba796176466fdeda5adcea43d16e19d31b5
SHA512

979a7953b49f488246d576f2a89b93a3f0a8c4c54abf66b3b4c2e7409d475bb14a44e2b7b2fe6416975cb8f6cad11f8ab477d26a8e5d60e75677c49ad43d8083
SSDEEP

192:QV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2NQ+DAU+vrWF8qa1Dojjgi:yqaCF31cix+Dc4zjYQ+DA9SFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.103.109.70:4949/jIXR

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0; msn OptimizedIE8;ENUS)

Targets

- Target
  
  503c4f84da9710d3a4d5d5e065664ba796176466fdeda5adcea43d16e19d31b5
- Size
  
  19KB
- MD5
  
  65a68d7eff257226e8c233c56d1e5317
- SHA1
  
  90b2ec682dc55c22abc08022f8e15b2297c210e1
- SHA256
  
  503c4f84da9710d3a4d5d5e065664ba796176466fdeda5adcea43d16e19d31b5
- SHA512
  
  979a7953b49f488246d576f2a89b93a3f0a8c4c54abf66b3b4c2e7409d475bb14a44e2b7b2fe6416975cb8f6cad11f8ab477d26a8e5d60e75677c49ad43d8083
- SSDEEP
  
  192:QV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2NQ+DAU+vrWF8qa1Dojjgi:yqaCF31cix+Dc4zjYQ+DA9SFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan