cobaltstrike | f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b | Triage™

Login
Reports

Overview

overview

Static

static

f211c45c2d...7b.exe

windows10-2004-x64

f211c45c2d...7b.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b.exe
Size 5.0MB
Sample251105-j8vtbatqen
SHA256 f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b
MD5 2d98445783055f16fa6c4a8975fa859a
SHA1 0297f81ad921d5291ca6ae200491b4f0a4b10b27
SHA512 b5d4668f9c1d44a30075605f2f9c59f1d05fce99a8b1d9fc91e15298441f842db0cffc5489c0491ae89c67e2c6dd68d2353cbcf23002ccac630040c7eaabafaa
SSDEEP 49152:1S6Xv29C6EqOK6BePTbHvaxZP4IFkHo9irX2KPR8YzqU5x:1Sav8O9cKBAvP6G75x
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

cobaltstrike goldbackdoor legionlocker metasploit snakekeylogger sunburst backdoor discovery keylogger miner ransomware stealer trojan

Static task

static1

12 signatures

miner ransomware backdoor goldbackdoor snakekeylogger legionlocker sunburst cobaltstrike metasploit

Behavioral task

behavioral1

Sample

f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

12 signatures

150 seconds

backdoor discovery cobaltstrike goldbackdoor metasploit snakekeylogger keylogger miner stealer trojan

Behavioral task

behavioral2

Sample

f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b.exe

Resource

win11-20251015-en

windows11-21h2-x64

12 signatures

150 seconds

backdoor discovery cobaltstrike goldbackdoor metasploit snakekeylogger keylogger miner stealer trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b.exe
- Size 5.0MB
- SHA256 f211c45c2dd508734dbd84d088e08848f116a978c2c3982260b4122c5785e47b
- MD5 2d98445783055f16fa6c4a8975fa859a
- SHA1 0297f81ad921d5291ca6ae200491b4f0a4b10b27
- SHA512 b5d4668f9c1d44a30075605f2f9c59f1d05fce99a8b1d9fc91e15298441f842db0cffc5489c0491ae89c67e2c6dd68d2353cbcf23002ccac630040c7eaabafaa
- SSDEEP 49152:1S6Xv29C6EqOK6BePTbHvaxZP4IFkHo9irX2KPR8YzqU5x:1Sav8O9cKBAvP6G75x
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

backdoor discovery cobaltstrike goldbackdoor metasploit snakekeylogger keylogger miner stealer trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
- GoldBackdoor
  A backdoor attributed to APT37 first seen targeting South Korean journalists.
  backdoor goldbackdoor
- GoldBackdoor payload
- Goldbackdoor family
  goldbackdoor
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
- Snake Keylogger
  Keylogger and Infostealer first seen in November 2020.
  stealer keylogger snakekeylogger
- Snake Keylogger payload
- Snakekeylogger family
  snakekeylogger
- Detectes NiceHashMiner Payload
  miner
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

minerransomwarebackdoorgoldbackdoorsnakekeyloggerlegionlockersunburstcobaltstrikemetasploit

behavioral1

backdoordiscoverycobaltstrikegoldbackdoormetasploitsnakekeyloggerkeyloggerminerstealertrojan

behavioral2

backdoordiscoverycobaltstrikegoldbackdoormetasploitsnakekeyloggerkeyloggerminerstealertrojan

© 2018-2026

Terms | Privacy