sample
09e539976b108e540de0573d4e83dd44ad7d9783f434642ae3cca299b06e88e6
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
09e539976b108e540de0573d4e83dd44ad7d9783f434642ae3cca299b06e88e6
TLP:CLEAR
Sample
sha-25609e539976b108e540de0573d4e83dd44ad7d9783f434642ae3cca299b06e88e6
familyCobalt Strike
identified byfile analysis
first seen2026-10-22 15:09 UTC
last seen2026-10-22 15:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 46.19.140.50:443 Cobalt Strike