cobaltstrike | 6240551fb9fef36d1d5d6959b285b47613aae18ae3669fce61e5c4aa3a8c7af7 | Triage

Sharing

General

Target

9775b1b847a9853841d644c1c4a9135f_JaffaCakes118
Size

12KB
Sample

241124-1y7hssxqfr
MD5

9775b1b847a9853841d644c1c4a9135f
SHA1

20d7ed104f0790d4ff70c1a36ce9027e1761e046
SHA256

6240551fb9fef36d1d5d6959b285b47613aae18ae3669fce61e5c4aa3a8c7af7
SHA512

17c275ee99e241d0bf7b6d120bfc16bea97dbe4336748afd53118f0fe753f8c73fcb2a0990b8a126b09015d18ea09916c138c7cb343ba5023e655591aa647d6f
SSDEEP

192:i1v65E6jB22y2clyrRzDiv1JpXouSl8LJhW5tfQ+IoO1:i1b6922VrR/iPpOurN

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.0.135:80/UOVc

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)

Targets

- Target
  
  9775b1b847a9853841d644c1c4a9135f_JaffaCakes118
- Size
  
  12KB
- MD5
  
  9775b1b847a9853841d644c1c4a9135f
- SHA1
  
  20d7ed104f0790d4ff70c1a36ce9027e1761e046
- SHA256
  
  6240551fb9fef36d1d5d6959b285b47613aae18ae3669fce61e5c4aa3a8c7af7
- SHA512
  
  17c275ee99e241d0bf7b6d120bfc16bea97dbe4336748afd53118f0fe753f8c73fcb2a0990b8a126b09015d18ea09916c138c7cb343ba5023e655591aa647d6f
- SSDEEP
  
  192:i1v65E6jB22y2clyrRzDiv1JpXouSl8LJhW5tfQ+IoO1:i1b6922VrR/iPpOurN
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan