sample
1beadcc693b30bd04ba37e81edf6cb0627ee2309fba6e3dc49a7c6ba93b4c18f
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
1beadcc693b30bd04ba37e81edf6cb0627ee2309fba6e3dc49a7c6ba93b4c18f
TLP:CLEAR
Sample
sha-2561beadcc693b30bd04ba37e81edf6cb0627ee2309fba6e3dc49a7c6ba93b4c18f
familyCobalt Strike
identified byfile analysis
first seen2026-10-08 09:06 UTC
last seen2026-10-16 09:10 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 169.239.128.43:50443 Cobalt Strike