sample
1df494a8c3f8083421a3f48da6a06b9da64c66180204dc323629e14d6b117b27
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
1df494a8c3f8083421a3f48da6a06b9da64c66180204dc323629e14d6b117b27
TLP:CLEAR
Sample
sha-2561df494a8c3f8083421a3f48da6a06b9da64c66180204dc323629e14d6b117b27
familyCobalt Strike
identified byfile analysis
first seen2026-09-28 03:43 UTC
last seen2026-09-28 03:43 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 156.239.224.131:80 Cobalt Strike