cobaltstrike | c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0 | Triage

Sharing

General

Target

c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0N.exe
Size

17KB
Sample

241124-nlcrfatmbn
MD5

3ce3abd823a020f7bc05313372880410
SHA1

9addf27fd5ba00443714cab7073b93f475913fee
SHA256

c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0
SHA512

fd8ede211cb207e0418fcde10bfb99f39ba2ff7c9d4b7c230d7394d6bf1ba4e2de47f4b25d1a1e682228d87acecfba83908d5eb2354e6262d325c86cd4941d70
SSDEEP

192:CDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4TKxTt+6kxiY:CDMAoKz6WtKEj7aBDig0IAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.75.134:1000/CUSr

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Targets

- Target
  
  c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0N.exe
- Size
  
  17KB
- MD5
  
  3ce3abd823a020f7bc05313372880410
- SHA1
  
  9addf27fd5ba00443714cab7073b93f475913fee
- SHA256
  
  c6eac96ad4e5ff0a1cb07ae994786a82f069427080a591a132a9bd46860eaaa0
- SHA512
  
  fd8ede211cb207e0418fcde10bfb99f39ba2ff7c9d4b7c230d7394d6bf1ba4e2de47f4b25d1a1e682228d87acecfba83908d5eb2354e6262d325c86cd4941d70
- SSDEEP
  
  192:CDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4TKxTt+6kxiY:CDMAoKz6WtKEj7aBDig0IAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan