sample
08b6aaa8a5fabffd2de8dd836cc4a08df19929f8ddcf626f757ed29e502bf220
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
08b6aaa8a5fabffd2de8dd836cc4a08df19929f8ddcf626f757ed29e502bf220
TLP:CLEAR
Sample
sha-25608b6aaa8a5fabffd2de8dd836cc4a08df19929f8ddcf626f757ed29e502bf220
familyCobalt Strike
identified byfile analysis
first seen2026-10-07 03:12 UTC
last seen2026-10-07 15:12 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 85.175.101.203:443 Cobalt Strike