cobaltstrike | c5658ed9eb4d3ad9d74da696e44050e7817c8af19bb46984b90e9148ce0f5397 | Triage

Sharing

General

Target

c5658ed9eb4d3ad9d74da696e44050e7817c8af19bb46984b90e9148ce0f5397
Size

19KB
Sample

241124-skf5pa1pgj
MD5

61c2b3269ae106aab882075a44e3382d
SHA1

c8859464dbdaded7a0c22011a22714573f74583d
SHA256

c5658ed9eb4d3ad9d74da696e44050e7817c8af19bb46984b90e9148ce0f5397
SHA512

e51551213ac2273a3d66d0fc641b7e99c35be4e6e41cc700135dcc6661e1b15c30928a4389b48f1f9400dc138242096415f9fb31f5f4b463d7b7a6ce51e4e9ef
SSDEEP

192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2BiM9M4WF8qa1Dojjgi:8qaCF31cix+Dc4zjVNFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://37.32.24.56:8080/9flR

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Targets

- Target
  
  c5658ed9eb4d3ad9d74da696e44050e7817c8af19bb46984b90e9148ce0f5397
- Size
  
  19KB
- MD5
  
  61c2b3269ae106aab882075a44e3382d
- SHA1
  
  c8859464dbdaded7a0c22011a22714573f74583d
- SHA256
  
  c5658ed9eb4d3ad9d74da696e44050e7817c8af19bb46984b90e9148ce0f5397
- SHA512
  
  e51551213ac2273a3d66d0fc641b7e99c35be4e6e41cc700135dcc6661e1b15c30928a4389b48f1f9400dc138242096415f9fb31f5f4b463d7b7a6ce51e4e9ef
- SSDEEP
  
  192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2BiM9M4WF8qa1Dojjgi:8qaCF31cix+Dc4zjVNFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan