cobaltstrike | 24eda84a0f33999237faa9e1db9a6d073ac22e05ed37d678477eccfd34d2a893 | Triage

Sharing

General

Target

24eda84a0f33999237faa9e1db9a6d073ac22e05ed37d678477eccfd34d2a893
Size

19KB
Sample

240927-n9vl6a1hjm
MD5

8e8e90cbebe368f8a28e7f2c0f4d60c6
SHA1

9d5ac0cd882b1c91a01a27270862a2a85657cf5b
SHA256

24eda84a0f33999237faa9e1db9a6d073ac22e05ed37d678477eccfd34d2a893
SHA512

81a115e551a0206248d55ec949b36c0ae5e0fd260dc6301d2665d130e67151de1a0007d69b1bf8bc10fc211a57a003444337617b60ef3e7c79e98651a7c6bfd3
SSDEEP

192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/292v/LlWF8qa1Dojjgi:qqaCF31cix+Dc4zjdv/sFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.120.3.3:8044/lRk4

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; BOIE8;ENUS)

Targets

- Target
  
  24eda84a0f33999237faa9e1db9a6d073ac22e05ed37d678477eccfd34d2a893
- Size
  
  19KB
- MD5
  
  8e8e90cbebe368f8a28e7f2c0f4d60c6
- SHA1
  
  9d5ac0cd882b1c91a01a27270862a2a85657cf5b
- SHA256
  
  24eda84a0f33999237faa9e1db9a6d073ac22e05ed37d678477eccfd34d2a893
- SHA512
  
  81a115e551a0206248d55ec949b36c0ae5e0fd260dc6301d2665d130e67151de1a0007d69b1bf8bc10fc211a57a003444337617b60ef3e7c79e98651a7c6bfd3
- SSDEEP
  
  192:4V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/292v/LlWF8qa1Dojjgi:qqaCF31cix+Dc4zjdv/sFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan