cobaltstrike | 88dd72479bdb99d303a6cd73025cdfe6407dab87189a0acdd834757b91b0c428 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88dd72479bdb99d303a6cd73025cdfe6407dab87189a0acdd834757b91b0c428
Size

59KB
Sample

241004-1mrm7ssemg
MD5

c80fb993c4afdd45a0857ea1faba7550
SHA1

6aa6c0804312f7613f491bd9531e05fb200ee0e1
SHA256

88dd72479bdb99d303a6cd73025cdfe6407dab87189a0acdd834757b91b0c428
SHA512

14f7753a32a6f871b8e02c92fc091564fb00a21cf45a6d7c278142b1bfa640ed3efd040f4cb759d1ceb45399a970c6d260988240698d214328cfde231ff5ee76
SSDEEP

768:Uw9qBJmfqiFS4ZjvGfEqTIYv4gKNwFPmV1XlwVPHu9+5:rutrMjUEqTIm4gKN2PmV1XWVfuc

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.40.192.88:443/tVBQ

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Targets

- Target
  
  88dd72479bdb99d303a6cd73025cdfe6407dab87189a0acdd834757b91b0c428
- Size
  
  59KB
- MD5
  
  c80fb993c4afdd45a0857ea1faba7550
- SHA1
  
  6aa6c0804312f7613f491bd9531e05fb200ee0e1
- SHA256
  
  88dd72479bdb99d303a6cd73025cdfe6407dab87189a0acdd834757b91b0c428
- SHA512
  
  14f7753a32a6f871b8e02c92fc091564fb00a21cf45a6d7c278142b1bfa640ed3efd040f4cb759d1ceb45399a970c6d260988240698d214328cfde231ff5ee76
- SSDEEP
  
  768:Uw9qBJmfqiFS4ZjvGfEqTIYv4gKNwFPmV1XlwVPHu9+5:rutrMjUEqTIm4gKN2PmV1XWVfuc
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan