cobaltstrike | 057bd6481726e4d13ade8b4033161bd843cc9b73c8c9a3d899047a255fcc4dca

General

Target
057bd6481726e4d13ade8b4033161bd843cc9b73c8c9a3d899047a255fcc4dca
Size 3.4MB
Sample260919-jmh8dsx1ds
SHA256 057bd6481726e4d13ade8b4033161bd843cc9b73c8c9a3d899047a255fcc4dca
MD5 fe81e7dda9331b24df26802b35be763b
SHA1 6426b609822e42d7fd8e800a5636d96979388e63
SHA512 e780547fd41edcd03b0f866ccdbaab45d129c88364f206fa2729f2738903da2511ddf3cc9eb28d31ffb419244d278d27cb35ac39a40e317ecbaefc3bf9fd0920
SSDEEP 49152:jsgFI9k3HeErb/TLvO90d7HjmAFd4A64nsfJUU3fPb1MHbHGjLAi2PhhWq/U1IWN:j93HQ48p
TLSH
T1ACF5AEC3BC51E664C5AA92319850E5967A717C0C1F3323EB6701BFBE6E7A7C04A39358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

674054486

Attributes

beacon_type
512
http_header1
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
http_header2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
pipe_name
\\.\pipe\GoogleCrashServices-cd
polling_time
10000
port_number
4444
sc_process32
%windir%\syswow64\dllhost.exe
sc_process64
%windir%\System32\dllhost.exe
state_machine
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClz6rpPSyLOqKuqlhbTklPchpR/lDtZZ/kuevdGBolIGau61stBgMH7atrsooTuwgBpa/e94+YQBfcGbkNtzOqsOmJNupe7W1GFLXUtyosJm+IyZE0DpfUzY4XZZiXK+3OiJZ+Isp72zAECVBO5VBgln80Uqe47cAQu0dDudP96QIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
unknown1
8192
unknown2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
watermark
674054486

Targets

- Target
  057bd6481726e4d13ade8b4033161bd843cc9b73c8c9a3d899047a255fcc4dca
- Size 3.4MB
- SHA256 057bd6481726e4d13ade8b4033161bd843cc9b73c8c9a3d899047a255fcc4dca
- MD5 fe81e7dda9331b24df26802b35be763b
- SHA1 6426b609822e42d7fd8e800a5636d96979388e63
- SHA512 e780547fd41edcd03b0f866ccdbaab45d129c88364f206fa2729f2738903da2511ddf3cc9eb28d31ffb419244d278d27cb35ac39a40e317ecbaefc3bf9fd0920
- SSDEEP 49152:jsgFI9k3HeErb/TLvO90d7HjmAFd4A64nsfJUU3fPb1MHbHGjLAi2PhhWq/U1IWN:j93HQ48p
- TLSH
  T1ACF5AEC3BC51E664C5AA92319850E5967A717C0C1F3323EB6701BFBE6E7A7C04A39358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor 674054486 cobaltstrike trojan
- Family: Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Cobaltstrike

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2