cobaltstrike | 525ae0739923dca53521ca8174b691ae59f32d4a57ee8f978ff3e9891c6401fc | Triage

Sharing

General

Target

525ae0739923dca53521ca8174b691ae59f32d4a57ee8f978ff3e9891c6401fc
Size

2.3MB
Sample

241119-enrtpszdnd
MD5

37664778a8026af72b3d957419d182da
SHA1

e4e6ef9e527c2d4981a23d9b1de853380716161b
SHA256

525ae0739923dca53521ca8174b691ae59f32d4a57ee8f978ff3e9891c6401fc
SHA512

c2d657335665aedd5c6d53d7d80218782e8ba59c672b525fdb9ee0ac1ff9db7eee6ef55e19b64558ac82bab764a6bbe1e1a7affd92a51ab1b62754153a5940df
SSDEEP

24576:nTVGtcA1xyC4YvhamnCNVKeB1vc4ZcVsof9gcPPAPtEGH5AdoV6FaTv8:Tct4chafVKevv7m9gcPYPbH5oa78

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://h.com:8080/o2zB

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LBBROWSER)

Targets

- Target
  
  525ae0739923dca53521ca8174b691ae59f32d4a57ee8f978ff3e9891c6401fc
- Size
  
  2.3MB
- MD5
  
  37664778a8026af72b3d957419d182da
- SHA1
  
  e4e6ef9e527c2d4981a23d9b1de853380716161b
- SHA256
  
  525ae0739923dca53521ca8174b691ae59f32d4a57ee8f978ff3e9891c6401fc
- SHA512
  
  c2d657335665aedd5c6d53d7d80218782e8ba59c672b525fdb9ee0ac1ff9db7eee6ef55e19b64558ac82bab764a6bbe1e1a7affd92a51ab1b62754153a5940df
- SSDEEP
  
  24576:nTVGtcA1xyC4YvhamnCNVKeB1vc4ZcVsof9gcPPAPtEGH5AdoV6FaTv8:Tct4chafVKevv7m9gcPYPbH5oa78
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan