cobaltstrike | 12337440095c818098aa77e0df19cb0707a590050ccedeb46ffad330207af544 | Triage

Sharing

General

Target

12337440095c818098aa77e0df19cb0707a590050ccedeb46ffad330207af544
Size

19KB
Sample

241123-h8rwzs1lbz
MD5

2e4274d0a82179d38d7bb27f0a2335f2
SHA1

0187ef7c0946c53f7104b04a183a7c6cf0b7ec52
SHA256

12337440095c818098aa77e0df19cb0707a590050ccedeb46ffad330207af544
SHA512

10bc2ba6f8c61a3d7cc67e85fb1fba320080f35d6709c6ef075f10a86aafd34ebc65903e53e2692171407172ecc5a22f400d266013bfa7d854eb8e058ffdd2c0
SSDEEP

192:hV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZS0lf2XAWWF8qa1Dojjgi:zqaCF31cix+Dc4zjoBIsFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.2.131:80/ekKB

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

Targets

- Target
  
  12337440095c818098aa77e0df19cb0707a590050ccedeb46ffad330207af544
- Size
  
  19KB
- MD5
  
  2e4274d0a82179d38d7bb27f0a2335f2
- SHA1
  
  0187ef7c0946c53f7104b04a183a7c6cf0b7ec52
- SHA256
  
  12337440095c818098aa77e0df19cb0707a590050ccedeb46ffad330207af544
- SHA512
  
  10bc2ba6f8c61a3d7cc67e85fb1fba320080f35d6709c6ef075f10a86aafd34ebc65903e53e2692171407172ecc5a22f400d266013bfa7d854eb8e058ffdd2c0
- SSDEEP
  
  192:hV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZS0lf2XAWWF8qa1Dojjgi:zqaCF31cix+Dc4zjoBIsFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan