cobaltstrike | 722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef | Triage

Sharing

General

Target

722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef
Size

19KB
Sample

240927-rjslnayelb
MD5

370dcc1d0729d93d08255de011febaa4
SHA1

12462b20ff78fa8bc714c02fe6b4427d7b82842d
SHA256

722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef
SHA512

3e43839663825a4c4ee1ca8f81beda5b142539dc559e89df41bc24cedeaa9e58d85d326b47e24bf0a3cf08f9f64683c527e7867901ae979ef81efc9112df133c
SSDEEP

192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/28pZkEtNx/WF8qa1Dojjgi:8qaCF31cix+Dc4zjPwFFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://89.197.154.115:7700/mdS9

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)

Targets

- Target
  
  722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef
- Size
  
  19KB
- MD5
  
  370dcc1d0729d93d08255de011febaa4
- SHA1
  
  12462b20ff78fa8bc714c02fe6b4427d7b82842d
- SHA256
  
  722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef
- SHA512
  
  3e43839663825a4c4ee1ca8f81beda5b142539dc559e89df41bc24cedeaa9e58d85d326b47e24bf0a3cf08f9f64683c527e7867901ae979ef81efc9112df133c
- SSDEEP
  
  192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/28pZkEtNx/WF8qa1Dojjgi:8qaCF31cix+Dc4zjPwFFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan