sample
3e2fe3b30591fd8ea88c820b6db92256d4b17dcfed0c1c99bf3af26fc33b661a
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
3e2fe3b30591fd8ea88c820b6db92256d4b17dcfed0c1c99bf3af26fc33b661a
TLP:CLEAR
Sample
sha-2563e2fe3b30591fd8ea88c820b6db92256d4b17dcfed0c1c99bf3af26fc33b661a
familyCobalt Strike
identified byfile analysis
first seen2026-09-10 09:14 UTC
last seen2026-10-25 09:09 UTC
Served by 2 addresses
A widely distributed file can reach unrelated hosts.
- 14.225.212.124:30005 Cobalt Strike
- 222.255.215.42:30005 Cobalt Strike