cobaltstrike | d70a274836a67626f0130dfb4d9d537fde9ce623ef4413788f888e5d9994c137 | Triage

Sharing

General

Target

d70a274836a67626f0130dfb4d9d537fde9ce623ef4413788f888e5d9994c137.exe
Size

17KB
Sample

241125-q6kc5azkg1
MD5

9a67445a06b930f7eba811f3341860bc
SHA1

adbe6ba9b401973683bb715f65900f8cb4f87ad5
SHA256

d70a274836a67626f0130dfb4d9d537fde9ce623ef4413788f888e5d9994c137
SHA512

d869822f6587837a5df61c2a027c830ab0177b05140391e65f22c9fa645f67b91e5abd18e78323b4ee1069813672ddf32096d1daffb6f0d8f6a961cde2ea39bc
SSDEEP

192:CDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4TKxTt+6kxiYf:CDMAoKz6WtKEj7aBDig0IAYf

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.75.134:1000/CUSr

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Targets

- Target
  
  d70a274836a67626f0130dfb4d9d537fde9ce623ef4413788f888e5d9994c137.exe
- Size
  
  17KB
- MD5
  
  9a67445a06b930f7eba811f3341860bc
- SHA1
  
  adbe6ba9b401973683bb715f65900f8cb4f87ad5
- SHA256
  
  d70a274836a67626f0130dfb4d9d537fde9ce623ef4413788f888e5d9994c137
- SHA512
  
  d869822f6587837a5df61c2a027c830ab0177b05140391e65f22c9fa645f67b91e5abd18e78323b4ee1069813672ddf32096d1daffb6f0d8f6a961cde2ea39bc
- SSDEEP
  
  192:CDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4TKxTt+6kxiYf:CDMAoKz6WtKEj7aBDig0IAYf
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan