cobaltstrike | 70401fe3a501913baaa52a8b6114fde1ff10c9c6c72e26bf6de9eb88dc330662 | Triage

Sharing

General

Target

70401fe3a501913baaa52a8b6114fde1ff10c9c6c72e26bf6de9eb88dc330662
Size

19KB
Sample

241122-gw454svrcx
MD5

81ed123032162bd7c47bbdfeb62576c5
SHA1

5844d62249f3f0c205cd83f7eee8d0ab6b2e49d1
SHA256

70401fe3a501913baaa52a8b6114fde1ff10c9c6c72e26bf6de9eb88dc330662
SHA512

604e927cac29cde7c51cc12cbb002e562f3e0be22b6fa6dcf931a03f9a3e0b540c3f1b473174444bed8bb390b19e2a00983970e9766ff4e1d6a5ac39ba2e7c81
SSDEEP

192:bV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2vryceyYWF8qa1Dojjgi:1qaCF31cix+Dc4zjIy7ytFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.136.114.146:6666/n2Ql

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Targets

- Target
  
  70401fe3a501913baaa52a8b6114fde1ff10c9c6c72e26bf6de9eb88dc330662
- Size
  
  19KB
- MD5
  
  81ed123032162bd7c47bbdfeb62576c5
- SHA1
  
  5844d62249f3f0c205cd83f7eee8d0ab6b2e49d1
- SHA256
  
  70401fe3a501913baaa52a8b6114fde1ff10c9c6c72e26bf6de9eb88dc330662
- SHA512
  
  604e927cac29cde7c51cc12cbb002e562f3e0be22b6fa6dcf931a03f9a3e0b540c3f1b473174444bed8bb390b19e2a00983970e9766ff4e1d6a5ac39ba2e7c81
- SSDEEP
  
  192:bV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2vryceyYWF8qa1Dojjgi:1qaCF31cix+Dc4zjIy7ytFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan