sample
03c83c57276611b28d4f7388a9b698f0ef1df52808dc2fdd420adb887012a35c
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
03c83c57276611b28d4f7388a9b698f0ef1df52808dc2fdd420adb887012a35c
TLP:CLEAR
Sample
sha-25603c83c57276611b28d4f7388a9b698f0ef1df52808dc2fdd420adb887012a35c
familyCobalt Strike
identified byfile analysis
first seen2026-10-23 06:17 UTC
last seen2026-10-30 15:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 124.220.22.82:18443 Cobalt Strike