cobaltstrike | 67aa2913cbf0e756237379e61884a67761158ad12397cbef271be39878eaa4d7 | Triage

Sharing

General

Target

67aa2913cbf0e756237379e61884a67761158ad12397cbef271be39878eaa4d7
Size

19KB
Sample

241125-geya8sxnbl
MD5

6a8f112b7a21426c9f116e768cb255e9
SHA1

3f8e20d659bf18150ddd946b7bb0e1dbf4b62ef6
SHA256

67aa2913cbf0e756237379e61884a67761158ad12397cbef271be39878eaa4d7
SHA512

d4ce471f7619231c17c0f987848e8b549c2feefa96f51644fb23f1a21c202a3d8f79c5b2d743620eb14c261c34990857b4b6fd91972389588613baa7294920f2
SSDEEP

192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dWF8qa1Dojjgi:wqaCF31cix+Dc4zjjFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.40.203.118:4444/6Pin

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Targets

- Target
  
  67aa2913cbf0e756237379e61884a67761158ad12397cbef271be39878eaa4d7
- Size
  
  19KB
- MD5
  
  6a8f112b7a21426c9f116e768cb255e9
- SHA1
  
  3f8e20d659bf18150ddd946b7bb0e1dbf4b62ef6
- SHA256
  
  67aa2913cbf0e756237379e61884a67761158ad12397cbef271be39878eaa4d7
- SHA512
  
  d4ce471f7619231c17c0f987848e8b549c2feefa96f51644fb23f1a21c202a3d8f79c5b2d743620eb14c261c34990857b4b6fd91972389588613baa7294920f2
- SSDEEP
  
  192:WV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dWF8qa1Dojjgi:wqaCF31cix+Dc4zjjFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan