cobaltstrike | 1b9ee2c99d70f98bbbd9953eeb94cab6de402385ac2d8fe6932b8f7c663ecc2b | Triage

Sharing

General

Target

1b9ee2c99d70f98bbbd9953eeb94cab6de402385ac2d8fe6932b8f7c663ecc2b
Size

19KB
Sample

241126-q8cfaszpdn
MD5

490a40af65acf60578a38eb8d35ea060
SHA1

552bd2c3a5eed9251b6ca752fc0e74fb18262310
SHA256

1b9ee2c99d70f98bbbd9953eeb94cab6de402385ac2d8fe6932b8f7c663ecc2b
SHA512

ef346706c10f370d8a320e6933b358cd243cd6c7d2c5cda12fc5d37cae6e1f729603672d2aa705f067e4983f0bc58601a520e60591bdec7f3eaa7ed2205f7bd3
SSDEEP

192:TV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2MbE89JWF8qa1Dojjgi:9qaCF31cix+Dc4zj3bEmUFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://113.45.190.149:81/RVpE

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Targets

- Target
  
  1b9ee2c99d70f98bbbd9953eeb94cab6de402385ac2d8fe6932b8f7c663ecc2b
- Size
  
  19KB
- MD5
  
  490a40af65acf60578a38eb8d35ea060
- SHA1
  
  552bd2c3a5eed9251b6ca752fc0e74fb18262310
- SHA256
  
  1b9ee2c99d70f98bbbd9953eeb94cab6de402385ac2d8fe6932b8f7c663ecc2b
- SHA512
  
  ef346706c10f370d8a320e6933b358cd243cd6c7d2c5cda12fc5d37cae6e1f729603672d2aa705f067e4983f0bc58601a520e60591bdec7f3eaa7ed2205f7bd3
- SSDEEP
  
  192:TV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2MbE89JWF8qa1Dojjgi:9qaCF31cix+Dc4zj3bEmUFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan