MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 26760ca79ec85b46777cda948a746134b8513692075fbc17db7a553b24fd3482. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


CobaltStrike


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 26760ca79ec85b46777cda948a746134b8513692075fbc17db7a553b24fd3482
SHA3-384 hash: 3f3a887ee31615ee97464968a5ba9b681a3e361e5050835ada47034ef25c6809f03249e41c2831ce2854dd5988866291
SHA1 hash: 1dcfde9adc2622e4fb366a02a8382c31fa60b047
MD5 hash: e5fe13a54f5c36fb0869d2faab6391ec
humanhash: pizza-video-sad-nuts
File name:26760ca79ec85b46777cda948a746134b8513692075fbc17db7a553b24fd3482
Download: download sample
Signature CobaltStrike
Create hunting rule
File size:17'920 bytes
First seen:2020-09-04 12:39:40 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 17b461a082950fc6332228572138b80c (121 x CobaltStrike, 2 x Cobalt Strike)
ssdeep 192:aeA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2u/oj6EUbOD6kxiY:PA0TJASPp6p/D43FvWgep6/w6IAY
TLSH 61820A7FB60268D8C127D17CC9EE6771ACF27423417B571F1B78C6306E20978466D909
Reporter JAMESWT_WT
Tags:139.199.158.84 CobaltStrike

Intelligence

File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/55996/
Detection(s):
Win.Trojan.CobaltStrike-9044898-1
Create hunting rule

Win.Trojan.CobaltStrike-7899871-1
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Connection attempt
Launching the default Windows debugger (dwwin.exe)
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/26760ca79ec85b46777cda948a746134b8513692075fbc17db7a553b24fd3482/
Threat name:
Win64.Trojan.Cobalt
Create hunting rule
Status:
Malicious
First seen:
2020-08-29 16:35:00 UTC
File Type:
PE+ (Exe)
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Result
Malware family:
metasploit
Create hunting rule
Score:
  10/10
Tags:
trojan backdoor family:metasploit
Link:
https://tria.ge/reports/200904-2e8cpqqrj6/
Behaviour
MetaSploit
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/26760ca79ec85b46777cda948a746134b8513692075fbc17db7a553b24fd3482

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
X
https://twitter.com/malwrhunterteam/status/1301842275098595331?s=20
Cape
Cape
https://www.capesandbox.com/analysis/55996/

Comments