Overview

overview

10

Static

static

3

cf6c2ccc89...81.exe

windows7-x64

10

cf6c2ccc89...81.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf6c2ccc899d70cb37af9afd59609958dbb1f248ac60a7e8dbda53135de84a81

  • Size

    19KB

  • Sample

    241127-gvrhmaxqan

  • MD5

    6ebdbf0361a0d1b532162d65bb9fe346

  • SHA1

    de66f723c0b74b2a519f71b6a8c35fea757a8606

  • SHA256

    cf6c2ccc899d70cb37af9afd59609958dbb1f248ac60a7e8dbda53135de84a81

  • SHA512

    5d3c122b910d8e57ed67c0a5522d342e1c5789b5fdad7b2397d10538b650ef82c8685cf60777595d736554a8c70ae2685447d02df4053baac5bb5caea8cdd802

  • SSDEEP

    192:9V7qaCF6Op1i2dobVXujRDcBaXWQjwOT/29pDWF8qa1Dojjgi:vqaCF31Dix+Dc4zjlFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.14.2:443/messages/DBLCNIF13

Attributes
  • user_agent

    Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: close User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Touch)

Targets

    • Target

      cf6c2ccc899d70cb37af9afd59609958dbb1f248ac60a7e8dbda53135de84a81

    • Size

      19KB

    • MD5

      6ebdbf0361a0d1b532162d65bb9fe346

    • SHA1

      de66f723c0b74b2a519f71b6a8c35fea757a8606

    • SHA256

      cf6c2ccc899d70cb37af9afd59609958dbb1f248ac60a7e8dbda53135de84a81

    • SHA512

      5d3c122b910d8e57ed67c0a5522d342e1c5789b5fdad7b2397d10538b650ef82c8685cf60777595d736554a8c70ae2685447d02df4053baac5bb5caea8cdd802

    • SSDEEP

      192:9V7qaCF6Op1i2dobVXujRDcBaXWQjwOT/29pDWF8qa1Dojjgi:vqaCF31Dix+Dc4zjlFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks