cobaltstrike | a7a8caf53b605904b6f95cad3d1f6e1afee52b4b6b5deb00234c1e576d30c34c | Triage

Sharing

General

Target

a7a8caf53b605904b6f95cad3d1f6e1afee52b4b6b5deb00234c1e576d30c34c
Size

2.3MB
Sample

241119-ejx5xs1bjq
MD5

70f8db260da73e14c7d40545531025f2
SHA1

b19c93a885e4934ad12d0bc1e2b57f4bdc71ee96
SHA256

a7a8caf53b605904b6f95cad3d1f6e1afee52b4b6b5deb00234c1e576d30c34c
SHA512

5813fd8b6e1e02340f42862dfccca37cc3e2e3098f5fcddc212cb03f0db44ee96bb66f46c3f578d84f16020a85a174cbf50b9ca7ee9b08891ea329e02b5436f3
SSDEEP

24576:nTVGtcA1xyC4YWhimnCNVKeB1vc4ZcVsof9gckPAPtEGH5AQoV6FaTv8:Tct4lhifVKevv7m9gckYPbH51a78

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://h.com:8080/o2zB

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LBBROWSER)

Targets

- Target
  
  a7a8caf53b605904b6f95cad3d1f6e1afee52b4b6b5deb00234c1e576d30c34c
- Size
  
  2.3MB
- MD5
  
  70f8db260da73e14c7d40545531025f2
- SHA1
  
  b19c93a885e4934ad12d0bc1e2b57f4bdc71ee96
- SHA256
  
  a7a8caf53b605904b6f95cad3d1f6e1afee52b4b6b5deb00234c1e576d30c34c
- SHA512
  
  5813fd8b6e1e02340f42862dfccca37cc3e2e3098f5fcddc212cb03f0db44ee96bb66f46c3f578d84f16020a85a174cbf50b9ca7ee9b08891ea329e02b5436f3
- SSDEEP
  
  24576:nTVGtcA1xyC4YWhimnCNVKeB1vc4ZcVsof9gckPAPtEGH5AQoV6FaTv8:Tct4lhifVKevv7m9gckYPbH51a78
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan