cobaltstrike | 5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132 | Triage

Sharing

General

Target

5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
Size

17KB
Sample

241214-ej316svper
MD5

ede69af9ae89011d6118e2f3e1f30219
SHA1

5e9284c463542ccef1e2083973bfaa7fa207acda
SHA256

5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132
SHA512

298e124dff6c3cac2532f35ba14995c40c44eba17ea145a724490a77945bbc797a3dd8c369a728a5594c9fd605421bab48dae712d9a5151194e82526044b6cfb
SSDEEP

192:ADMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH403oRK+BUbOj6kxiY:ADMAoKz6WtKEj7aBDiH32bAY

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://118.31.122.36:8079/Y2dn

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132.exe
- Size
  
  17KB
- MD5
  
  ede69af9ae89011d6118e2f3e1f30219
- SHA1
  
  5e9284c463542ccef1e2083973bfaa7fa207acda
- SHA256
  
  5d85b017444b2fab71ad0caeba8e6ab7f30a94f79a85ed256450e026a02e9132
- SHA512
  
  298e124dff6c3cac2532f35ba14995c40c44eba17ea145a724490a77945bbc797a3dd8c369a728a5594c9fd605421bab48dae712d9a5151194e82526044b6cfb
- SSDEEP
  
  192:ADMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH403oRK+BUbOj6kxiY:ADMAoKz6WtKEj7aBDiH32bAY
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan