cobaltstrike | 739d7fee4fcdbc7e3e5fddefbbd5cd0c16563e9e5bc404c010a0801c0c7b171a | Triage

Sharing

General

Target

739d7fee4fcdbc7e3e5fddefbbd5cd0c16563e9e5bc404c010a0801c0c7b171a
Size

77KB
Sample

241124-n1lmwsxrgz
MD5

bfc56a91509fa1f4d32ac34b1a9f0a67
SHA1

3b19b71d32fae7b9dccd4745d7054669334feda8
SHA256

739d7fee4fcdbc7e3e5fddefbbd5cd0c16563e9e5bc404c010a0801c0c7b171a
SHA512

18496353de4001868765aabcefd2dc7e94d66a7a7e0bfc5d3ea9df520b5e33176c049217cdb0cac5a046a147cd939d243cd36ad3292cead38e72dc059c4d35bd
SSDEEP

1536:iZuN27+7dfO8JG+9yvIZSKglB83g/8zUr:iZuNvJDeqSBEzg

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.101.200.29:8081/z7UW

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  739d7fee4fcdbc7e3e5fddefbbd5cd0c16563e9e5bc404c010a0801c0c7b171a
- Size
  
  77KB
- MD5
  
  bfc56a91509fa1f4d32ac34b1a9f0a67
- SHA1
  
  3b19b71d32fae7b9dccd4745d7054669334feda8
- SHA256
  
  739d7fee4fcdbc7e3e5fddefbbd5cd0c16563e9e5bc404c010a0801c0c7b171a
- SHA512
  
  18496353de4001868765aabcefd2dc7e94d66a7a7e0bfc5d3ea9df520b5e33176c049217cdb0cac5a046a147cd939d243cd36ad3292cead38e72dc059c4d35bd
- SSDEEP
  
  1536:iZuN27+7dfO8JG+9yvIZSKglB83g/8zUr:iZuNvJDeqSBEzg
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2